10.0crit
CVE-2009-2935in critical feed
Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possi…
Published 17 y ago · modified 4 mo ago · JSON
CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
5.7%
percentile 93%
Public exploits
0
none known
Summary
Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.
Exploit prediction (EPSS)
5.69% probability of exploitation in the next 30 days, higher than 93% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
- CWE-264 Permissions, Privileges, and Access Controls
- Technology feeds
- Google Chrome (RSS, critical only)
References
- vupen.com /english/advisories/2009/2420 · vdb-entry, x_refsource_VUPEN, x_transferred
- osvdb.org /57421 · vdb-entry, x_refsource_OSVDB, x_transferred
- secunia.com /advisories/36417 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- securityfocus.com /bid/36149 · vdb-entry, x_refsource_BID, x_transferred
- googlechromereleases.blogspot.com /2009/08/stable-update-security-fixes.html · x_refsource_CONFIRM, x_transferred
- securitytracker.com /id?1022773 · vdb-entry, x_refsource_SECTRACK, x_transferred
- code.google.com /p/chromium/issues/detail?id=18639 · x_refsource_CONFIRM, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/52902 · vdb-entry, x_refsource_XF, x_transferred
Sources
- CVE List: CVE-2009-2935
- NVD: CVE-2009-2935
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.