CVE-2013-0927: Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads...

Security readout for executives and security teams

This CVE affects old Google Chrome OS builds before 26.0.1410.57. Chrome OS used Pango configuration loading behavior that could read user-controlled configuration files, allowing intended access restrictions to be bypassed. The public bundle does not provide a CVSS score, CWE, or detailed impact statement. Exposure appears limited to legacy Google Chrome OS systems or images older than 26.0.1410.57. The CVE metadata lists affected vendor and product as n/a, so asset teams should validate by Chrome OS version and vendor release notes rather than CPE matching alone. Prioritize as legacy exposure cleanup, not an emergency, unless the organization still operates Chrome OS builds older than 26.0.1410.57. The absence of CVSS, KEV, and exploitation evidence limits urgency, but unsupported systems should be removed from production. Mitigation focus: Update Chrome OS systems to 26.0.1410.57 or later.; Retire or isolate Chrome OS builds that cannot receive the stable update.; Check Google or Chromium guidance before applying compensating controls..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.