CVE-2011-1190
The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to...
CVE-2011-1190 is a medium vulnerability (CVSS 5.0) in Google Chrome, published March 10, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.90%, the 80th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 1.90%EPSS, 80th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromium-browserDebian:6.0 From an advisory covering 12 CVEs | before 6.0.472.63~r59945-5+squeeze3, plus listed versions 6.0.472.63~r59945-56.0.472.63~r59945-5+squeeze2 | 6.0.472.63~r59945-5+squeeze3 |
qtwebkit-sourceUbuntu:16.04:LTS | All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11 | None known |
What each source reports
NVD Score used
The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
- Record
CVE-2011-1190- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
- Record
CVE-2011-1190- Updated
- 2026-11-02
EUVDEUVD-2011-1198No score
The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
- Record
EUVD-2011-1198- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5pwj-4r4w-6355No score
The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to...
The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
- Record
GHSA-5pwj-4r4w-6355- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2011-1190No score
The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
- Record
UBUNTU-CVE-2011-1190- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
code.google.com/p/chromium/issues/detail?id=70336
securityfocus.com/bid/46785
lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
exchange.xforce.ibmcloud.com/vulnerabilities/65954
googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html
support.apple.com/kb/HT4999
Show 8 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14398
vupen.com/english/advisories/2011/0628
nvd.nist.gov/vuln/detail/CVE-2011-1190
github.com/advisories/GHSA-5pwj-4r4w-6355
ubuntu.com/security/CVE-2011-1190
cve.org/CVERecord?id=CVE-2011-1190