CVE-2009-2935: Google Chrome

High severity, CVSS 10.0. EPSS: 5% chance of exploitation in the next 30 days.

Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.

Affected products

• Google Chrome: up to and including 2.0.172.37; version 0.2.149.27 only; version 0.2.149.29 only; version 0.2.149.30 only; version 0.2.152.1 only; version 0.2.153.1 only; …

Published 2009-08-27. Last modified 2026-06-16.