CVE-2011-3640

no score yetEPSS 1.4%

google chrome: no CVSS score yet. EPSS 1.4% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response was "Strange behavior, but we're not treating this as a security bug."

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-426
Published: 2011-10-28
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

google:chrome

References

http://blog.acrossecurity.com/2011/10/google-chrome-pkcs11txt-file-planting.html
http://code.google.com/p/chromium/issues/detail?id=97426
http://securityreason.com/securityalert/8483
https://bugzilla.mozilla.org/show_bug.cgi?id=641052
https://hermes.opensuse.org/messages/13154861

Check your stack JSON