CVE-2013-2926

CVE-2013-2926 describes a use-after-free vulnerability in the IndentOutdentCommand::tryIndentingAsListItem function within Blink, affecting Google Chrome versions prior to 30.0.1599.101. This flaw allows user-assisted remote attackers to trigger a denial of service or potentially achieve other unspecified impacts through specially crafted list elements. With a CVSS score of 6.8, this vulnerability is rated as medium severity, requiring user interaction (AC:M) and potentially leading to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). The attack vector is network-based (AV:N). There is no evidence of active exploitation (KEV: No), and no public exploit code is available via Metasploit, Nuclei, or ExploitDB. While there is limited community discussion and media coverage, its EPSS score is low, suggesting a low likelihood of exploitation in the wild.