CVE-2013-2902

CVE-2013-2902 describes a use-after-free vulnerability in the XSLT ProcessingInstruction implementation within Blink, affecting Google Chrome versions prior to 29.0.1547.57 and related Debian packages. This flaw allows remote attackers to trigger a denial of service or potentially other unspecified impacts through specially crafted HTML documents or xsl:processing-instruction elements during loading. With a CVSS score of 7.5, this vulnerability is considered high severity, requiring no authentication and having low attack complexity (AV:N/AC:L/Au:N). Successful exploitation could lead to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). There is no evidence of active exploitation (KEV: No), nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, with only one mention and one article identified, indicating low public attention.