CVE-2013-0926 Other in n/a

Medium 6.8 Published Updated

User-assisted attackers can exploit improper handling of active content in EMBED elements during copy-paste operations in Google Chrome.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
A user has to click or open something
Fix
None listed

What is CVE-2013-0926?

CVE-2013-0926 is a medium-severity vulnerability in Google Chrome, published on 28 Mar 2013. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site.

Weakness: CWE-20

Which versions are affected by CVE-2013-0926?

It affects 1 product.

Products include Google Chrome.

How do I fix CVE-2013-0926?

No fix has been published for CVE-2013-0926 yet. Limit exposure of the affected software until one is available.

Is CVE-2013-0926 being exploited?

There is no known exploitation of CVE-2013-0926 in the wild and no public exploit code.

All Google Chrome vulnerabilities

Sources

Also known as GHSA-cr2g-h4x4-c3qq.

Is CVE-2013-0926 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free