CVE-2009-2935

Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.

• CWE-264

• http://code.google.com/p/chromium/issues/detail?id=18639Vendor Advisory
• http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.htmlVendor Advisory
• http://osvdb.org/57421
• http://secunia.com/advisories/36417Vendor Advisory
• http://www.securityfocus.com/bid/36149
• http://www.securitytracker.com/id?1022773
• http://www.vupen.com/english/advisories/2009/2420Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52902
• http://code.google.com/p/chromium/issues/detail?id=18639Vendor Advisory
• http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.htmlVendor Advisory
• http://osvdb.org/57421
• http://secunia.com/advisories/36417Vendor Advisory
• http://www.securityfocus.com/bid/36149
• http://www.securitytracker.com/id?1022773
• http://www.vupen.com/english/advisories/2009/2420Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52902

Published

Aug 27, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2929Multiple SQL injection vulnerabilities in TGS Content Manage…
• CVE-2009-2930Cross-site scripting (XSS) vulnerability in the Search featu…
• CVE-2009-2931Directory traversal vulnerability in p.php in SlideShowPro D…
• CVE-2009-2932Cross-site scripting (XSS) vulnerability in uddiclient/proce…
• CVE-2009-2933SQL injection vulnerability in comments.php in Piwigo before…
• CVE-2009-2934Multiple stack-based buffer overflows in xaudio.dll in Progr…
• CVE-2009-2936The Command Line Interface (aka Server CLI or administration…
• CVE-2009-2937Cross-site scripting (XSS) vulnerability in Planet 2.0 and P…
• CVE-2009-2939The postfix.postinst script in the Debian GNU/Linux and Ubun…
• CVE-2009-2940The pygresql module 3.8.1 and 4.0 for Python does not proper…
• CVE-2009-2942The mysql-ocaml bindings 1.0.4 for MySQL do not properly sup…
• CVE-2009-2943The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for P…