CVE-2011-1806
Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows...
CVE-2011-1806 is a high vulnerability (CVSS 10.0) in Google Chrome, published May 26, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.03%, the 87th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 3.03%EPSS, 87th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
qtwebkit-sourceUbuntu:16.04:LTS | All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11 | None known |
What each source reports
NVD Score used 10.0
Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
- Record
CVE-2011-1806- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
- Record
CVE-2011-1806- Updated
- 2026-11-02
EUVDEUVD-2011-1804No score
Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
- Record
EUVD-2011-1804- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rqw6-j5pf-6mvvNo score
Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows...
Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
- Record
GHSA-rqw6-j5pf-6mvv- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2011-1806No score
Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
- Record
UBUNTU-CVE-2011-1806- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
googlechromereleases.blogspot.com/2011/05/stable-channel-update_24.html
securityfocus.com/bid/47964
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14389
code.google.com/p/chromium/issues/detail?id=82873
nvd.nist.gov/vuln/detail/CVE-2011-1806
github.com/advisories/GHSA-rqw6-j5pf-6mvv
ubuntu.com/security/CVE-2011-1806
cve.org/CVERecord?id=CVE-2011-1806