CVE-2013-2908: Google Chrome

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote attackers to spoof the address bar via vectors involving a response with a 204 (aka No Content) status code.

Affected products

• Google Chrome: up to and including 30.0.1599.65; version 30.0.1599.0 only; version 30.0.1599.1 only; version 30.0.1599.2 only; version 30.0.1599.4 only; version 30.0.1599.5 only; …

Published 2013-10-02. Last modified 2026-06-16.