CVE-2011-2855
Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token...
Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."
Exploit likelihood
What each source reports
NVD Score used
Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."
- Record
CVE-2011-2855- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-74
- Updated
- 2026-11-02
CVE List No score
Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."
- Record
CVE-2011-2855- Updated
- 2026-11-02
EUVDEUVD-2011-2829 No score
Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."
- Record
EUVD-2011-2829- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3h47-86qq-gprm No score
Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token...
Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."
- Record
GHSA-3h47-86qq-gprm- Weakness
- CWE-74
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-2855 is a medium vulnerability (CVSS 6.8) in Google Chrome, published September 17, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.56%, the 75th percentile. No source names a fixed version.
References
osvdb.org/75557
code.google.com/p/chromium/issues/detail?id=92959
exchange.xforce.ibmcloud.com/vulnerabilities/69882
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14485
securitytracker.com/id?1026774
secunia.com/advisories/48377
Show 8 moreShow less
googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html
lists.apple.com/archives/security-announce/2012/Mar/msg00003.html
nvd.nist.gov/vuln/detail/CVE-2011-2855
github.com/advisories/GHSA-3h47-86qq-gprm