Unrated severityNVD Advisory· Published Jan 16, 2014· Updated Apr 29, 2026

CVE-2013-6646

Description

Use-after-free vulnerability in the Web Workers implementation in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the shutting down of a worker process.

Affected products

Google/Chrome
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Range: <32.0.1700.77
OpenSUSE/openSUSE2 versions
cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
- cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
Debian/Debian Linux2 versions
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

src.chromium.org/viewvc/chromenvdPatchVendor Advisory
src.chromium.org/viewvc/chromenvdPatchVendor Advisory
code.google.com/p/chromium/issues/detailnvdExploitPatchVendor Advisory
googlechromereleases.blogspot.com/2014/01/stable-channel-update.htmlnvdRelease NotesVendor Advisory
lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.htmlnvdBroken LinkThird Party Advisory
www.debian.org/security/2014/dsa-2862nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000