Vulnerability · NVD
CVE-2011-0778
CVE-2011-0778, Severity pending severity (CVSS —): 2 tracked apps concerned, all fixed or indeterminable on their current version.
- Severity (CVSS)
- -
- Exploitation
- 1.4 %
- Tracked apps
- 2
- Still exposed
- 0
EPSS, predicted over 30 days
Google Chrome before 9.0.597.84 does not properly restrict drag and drop operations, which might allow remote attackers to bypass the Same Origin Policy via unspecified vectors.
EPSS
1.40%
above median
percentile 70.5%
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
-
Affected ≤9.0.597.83 Fixed in > 9.0.597.83 Latest tracked - undetermined
-
Vulnerable CPE configurations (2)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | ≤9.0.597.83 | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | ≤9.0.597.83 | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |