Launchpad.net

CVE 2013-0924

The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors.

See the CVE page on Mitre.org for more details.