CVE-2011-2360
Google Chrome before 13.0.782.107 does not ensure that the user is prompted before download of a...
Google Chrome before 13.0.782.107 does not ensure that the user is prompted before download of a dangerous file, which makes it easier for remote attackers to bypass intended content restrictions via a crafted web site.
Exploit likelihood
What each source reports
NVD Score used
Google Chrome before 13.0.782.107 does not ensure that the user is prompted before download of a dangerous file, which makes it easier for remote attackers to bypass intended content restrictions via a crafted web site.
- Record
CVE-2011-2360- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Google Chrome before 13.0.782.107 does not ensure that the user is prompted before download of a dangerous file, which makes it easier for remote attackers to bypass intended content restrictions via a crafted web site.
- Record
CVE-2011-2360- Updated
- 2026-11-02
EUVDEUVD-2011-2349 No score
Google Chrome before 13.0.782.107 does not ensure that the user is prompted before download of a dangerous file, which makes it easier for remote attackers to bypass intended content restrictions via a crafted web site.
- Record
EUVD-2011-2349- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-27hr-fxqg-p922 No score
Google Chrome before 13.0.782.107 does not ensure that the user is prompted before download of a...
Google Chrome before 13.0.782.107 does not ensure that the user is prompted before download of a dangerous file, which makes it easier for remote attackers to bypass intended content restrictions via a crafted web site.
- Record
GHSA-27hr-fxqg-p922- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-2360 is a medium vulnerability (CVSS 4.3) in Google Chrome, published August 3, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.11%, the 66th percentile. No source names a fixed version.
References
googlechromereleases.blogspot.com/2011/08/stable-channel-update.html
osvdb.org/74230
exchange.xforce.ibmcloud.com/vulnerabilities/68942
code.google.com/p/chromium/issues/detail?id=79266
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14362
nvd.nist.gov/vuln/detail/CVE-2011-2360
github.com/advisories/GHSA-27hr-fxqg-p922