CVE-2011-2170
Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent...
CVE-2011-2170 is a medium vulnerability (CVSS 4.4) in Google Chrome Os, published May 24, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.16%, the 5th percentile. No source names a fixed version.
- Severity
- 4.4 MediumCVSS 2.0, NVD
- Exploit chance
- 0.16%EPSS, 5th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent changes on the about:flags page, which has unspecified impact and local attack vectors.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent changes on the about:flags page, which has unspecified impact and local attack vectors.
- Record
CVE-2011-2170- CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent changes on the about:flags page, which has unspecified impact and local attack vectors.
- Record
CVE-2011-2170- Updated
- 2026-11-02
EUVDEUVD-2011-2162No score
Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent changes on the about:flags page, which has unspecified impact and local attack vectors.
- Record
EUVD-2011-2162- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p57q-wxx6-h3r6No score
Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent...
Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent changes on the about:flags page, which has unspecified impact and local attack vectors.
- Record
GHSA-p57q-wxx6-h3r6- Weakness
- CWE-20
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
