CVE-2011-1807
Google Chrome before 11.0.696.71 does not properly handle blobs, which allows remote attackers to...
CVE-2011-1807 is a high vulnerability (CVSS 10.0) in Google Chrome, published May 26, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.09%, the 87th percentile. No source names a fixed version.
Google Chrome before 11.0.696.71 does not properly handle blobs, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger an out-of-bounds write.
Exploit likelihood
What each source reports
NVD Score used
Google Chrome before 11.0.696.71 does not properly handle blobs, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger an out-of-bounds write.
- Record
CVE-2011-1807- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
Google Chrome before 11.0.696.71 does not properly handle blobs, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger an out-of-bounds write.
- Record
CVE-2011-1807- Updated
- 2026-11-02
EUVDEUVD-2011-1805 No score
Google Chrome before 11.0.696.71 does not properly handle blobs, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger an out-of-bounds write.
- Record
EUVD-2011-1805- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rr53-xm7m-wp22 No score
Google Chrome before 11.0.696.71 does not properly handle blobs, which allows remote attackers to...
Google Chrome before 11.0.696.71 does not properly handle blobs, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger an out-of-bounds write.
- Record
GHSA-rr53-xm7m-wp22- Weakness
- CWE-787
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2011-1807 No score
Google Chrome before 11.0.696.71 does not properly handle blobs, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger an out-of-bounds write.
- Record
UBUNTU-CVE-2011-1807- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
qtwebkit-sourceUbuntu:16.04:LTS |
All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
code.google.com/p/chromium/issues/detail?id=82903
googlechromereleases.blogspot.com/2011/05/stable-channel-update_24.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14471
securityfocus.com/bid/47963
nvd.nist.gov/vuln/detail/CVE-2011-1807
github.com/advisories/GHSA-rr53-xm7m-wp22
ubuntu.com/security/CVE-2011-1807
cve.org/CVERecord?id=CVE-2011-1807