Every CVESearch/Get API key

CVE-2011-2875

Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing...

6.8 Medium

Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

Exploit likelihood

1.31%Up 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used6.8

Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

Record
CVE-2011-2875
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-843
Updated
2026-11-02
CVE ListNo score

Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

Record
CVE-2011-2875
Updated
2026-11-02
EUVDEUVD-2011-2849No score

Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

Record
EUVD-2011-2849
Updated
2026-11-03
GitHub AdvisoriesGHSA-7g9v-563q-v7c2No score

Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing...

Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

Record
GHSA-7g9v-563q-v7c2
Weakness
CWE-843
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-2875 is a medium vulnerability (CVSS 6.8) in Google Chrome, published September 17, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.31%, the 71st percentile. No source names a fixed version.

References

MoveEnter Open