CVE-2013-2632

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-03-21 · updated 2026-06-16

Description

Google V8 before 3.17.13, as used in Google Chrome before 27.0.1444.3, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code, as demonstrated by the Bejeweled game.

Affected products

Google Chrome: through 27.0.1444.0
Google V8: through 3.17.12; 3.17.0, 3.17.1, 3.17.2, 3.17.3, 3.17.4, 3.17.5 (+6)

References

http://code.google.com/p/v8/source/browse/trunk/ChangeLog
http://googlechromereleases.blogspot.com/2013/03/dev-channel-update_18.html
https://code.google.com/p/chromium/issues/detail?id=194749
http://code.google.com/p/v8/source/browse/trunk/ChangeLog
http://googlechromereleases.blogspot.com/2013/03/dev-channel-update_18.html
https://code.google.com/p/chromium/issues/detail?id=194749

Get alerted when CVE-2013-2632 or the next vulnerability affects your stack