VULNERABILITY INTELLIGENCE
CVE-2013-0887
CVSS score7.5 HIGH
EPSS probability0.88%
CISA KEVNot currently listed
Published2013-02-23
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The developer-tools process in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict privileges during interaction with a connected server, which has unspecified impact and attack vectors.
Weakness classification
- CWE-732: Incorrect Permission Assignment for Critical Resource
Primary references
- chrome-cve-admin@google.com
- chrome-cve-admin@google.com
- chrome-cve-admin@google.com
- chrome-cve-admin@google.com
- chrome-cve-admin@google.com
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108