CVE-2011-2795
google chrome: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.
Google Chrome before 13.0.782.107 does not prevent calls to functions in other frames, which allows remote attackers to bypass intended access restrictions via a crafted web site, related to a "cross-frame function leak."
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-11-01)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- google:chrome
References
- http://code.google.com/p/chromium/issues/detail?id=87339
- http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html
- http://osvdb.org/74245
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68957
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14653