CVE-2011-0778

no score yetEPSS 1.4%

Google Chrome before 9.0.597.84 does not properly restrict drag and drop operations, which might allow remote attackers to bypass the Same Origin Policy via unspecified vectors.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2011-02-04
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

google:chrome

References

http://code.google.com/p/chromium/issues/detail?id=59081
http://googlechromereleases.blogspot.com/2011/02/stable-channel-update.html
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
http://secunia.com/advisories/43368
http://www.debian.org/security/2011/dsa-2166

Check your stack JSON