CVE-2013-0909: Google Chrome

Medium severity, CVSS 5.0. EPSS: 0.9% chance of exploitation in the next 30 days.

The XSS Auditor in Google Chrome before 25.0.1364.152 allows remote attackers to obtain sensitive HTTP Referer information via unspecified vectors.

Affected products

• Google Chrome: up to and including 25.0.1364.126; version 25.0.1364.0 only; version 25.0.1364.1 only; version 25.0.1364.2 only; version 25.0.1364.3 only; version 25.0.1364.5 only; …

Published 2013-03-05. Last modified 2026-06-16.