Google Chrome OS 26.0.1410.26
Approved changes feed: RSS · Atom
cpe:2.3:o:google:chrome_os:26.0.1410.26:*:*:*:*:*:*:*
part: o version: 26.0.1410.26 update: *
| Vendor | Google (f181d1eb-7269-5bae-b76e-e66ceb214562) |
|---|---|
| Product | Chrome Os (6d151b09-c225-5f7c-80bc-0514cf1c5e8a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-2835 |
vulnerable | 2026-06-08 05:04:28.120796 |
Details available
Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2834.
Published: 2013-04-16T20:00:00.000Z
Updated: 2024-09-16T19:05:07.224Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2834 |
vulnerable | 2026-06-08 05:04:28.119242 |
Details available
Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2835.
Published: 2013-04-16T20:00:00.000Z
Updated: 2024-09-16T17:18:41.173Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2833 |
vulnerable | 2026-06-08 05:04:28.117239 |
Details available
Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper management of ownership relationships involving Elements and DrawElements.
Published: 2013-04-16T20:00:00.000Z
Updated: 2024-09-17T01:06:31.207Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2832 |
vulnerable | 2026-06-08 05:04:28.102285 |
Details available
The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS before 26.0.1410.57 does not prevent uninitialized data from remaining in a buffer, which might allow remote attackers to obtain sensitive information via unspecified vectors.
Published: 2013-04-16T20:00:00.000Z
Updated: 2024-09-16T20:01:39.888Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0927 |
vulnerable | 2026-06-08 05:03:51.197412 |
Details available
Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGO_RC_FILE environment variable, which allows attackers to bypass intended access restrictions via crafted configuration data.
Published: 2013-04-10T16:00:00.000Z
Updated: 2024-09-17T03:23:19.414Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.