الجديد في البرنامج
- A special reward for Andrey Labunets for his combination of  CVE-2013-2879 and CVE-2013-2868 along with some (since fixed)  server-side bugs.
- Low CVE-2013-2867: Block pop-unders in various scenarios.
- High CVE-2013-2879: Confusion setting up sign-in and sync.
- Medium CVE-2013-2868: Incorrect sync of NPAPI extension component.
- Medium CVE-2013-2869: Out-of-bounds read in JPEG2000 handling.
- Critical CVE-2013-2870: Use-after-free with network sockets.
- Medium CVE-2013-2853: Man-in-the-middle attack against HTTP in SSL.
- High CVE-2013-2871: Use-after-free in input handling.
- Low CVE-2013-2872: Possible lack of entropy in renderers.
- High CVE-2013-2873: Use-after-free in resource loading.
- Medium CVE-2013-2874: Screen data leak with GL textures.
- Medium CVE-2013-2875: Out-of-bounds-read in SVG.
- Medium CVE-2013-2876: Extensions permissions confusion with interstitials.
- Low CVE-2013-2877: Out-of-bounds read in XML parsing.
- Remove the “viewsource” attribute on iframes.
- Medium CVE-2013-2878: Out-of-bounds read in text handling.