CVE-2013-0922: Google Chrome before 26.0.1410.43 does not properly restrict brute-force access attempts against web sites...

Security readout for executives and security teams

This old Chrome vulnerability concerns weak restriction of repeated HTTP Basic Authentication attempts. The public record does not specify the exact impact or attack path. Business risk is mainly from legacy endpoints still running Chrome versions before 26.0.1410.43, especially where Basic Authentication remains in use. Exposure is likely limited to unmanaged or legacy systems running Google Chrome before 26.0.1410.43. Modern patched Chrome installations should not be considered exposed based on the provided sources. Handle as a legacy browser hygiene issue unless scans find obsolete Chrome in production. The lack of severity and exploitation evidence lowers urgency, but unsupported browsers create avoidable security debt. Mitigation focus: Upgrade Chrome to version 26.0.1410.43 or later.; Remove unsupported Chrome versions from managed endpoints.; Review vendor release notes and vulnerability scanner guidance..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.