VULNERABILITY INTELLIGENCE
CVE-2013-0889
CVSS score6.8 MEDIUM
EPSS probability1.51%
CISA KEVNot currently listed
Published2013-02-23
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly enforce a user gesture requirement before proceeding with a file download, which might make it easier for remote attackers to execute arbitrary code via a crafted file.
Weakness classification
- CWE-863: Incorrect Authorization