CVE-2009-2935

Published: Aug 27, 2009Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.

Affected (30)

Products: Google: Chrome

Google

1 product

Chrome

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Google Chrome	Up to 2.0.172.37
Google Chrome	Version 0.2.149.27
Google Chrome	Version 0.2.149.29
Google Chrome	Version 0.2.149.30
Google Chrome	Version 0.2.152.1
Google Chrome	Version 0.2.153.1
Google Chrome	Version 0.3.154.0
Google Chrome	Version 0.3.154.3
Google Chrome	Version 0.4.154.18
Google Chrome	Version 0.4.154.22
Google Chrome	Version 0.4.154.31
Google Chrome	Version 0.4.154.33
Google Chrome	Version 1.0.154.36
Google Chrome	Version 1.0.154.39
Google Chrome	Version 1.0.154.42
Google Chrome	Version 1.0.154.43
Google Chrome	Version 1.0.154.46
Google Chrome	Version 1.0.154.48
Google Chrome	Version 1.0.154.52
Google Chrome	Version 1.0.154.53
Google Chrome	Version 1.0.154.59
Google Chrome	Version 2.0.156.1
Google Chrome	Version 2.0.157.0
Google Chrome	Version 2.0.157.2
Google Chrome	Version 2.0.158.0
Google Chrome	Version 2.0.159.0
Google Chrome	Version 2.0.172.30
Google Chrome	Version 2.0.172.31
Google Chrome	Version 2.0.172.33
Google Chrome	Version 2.0.172