Vulnerability · NVD
CVE-2011-4691
CVE-2011-4691, Severity pending severity (CVSS —): 2 tracked apps concerned, all fixed or indeterminable on their current version.
- Severity (CVSS)
- -
- Exploitation
- 1.1 %
- Tracked apps
- 2
- Still exposed
- 0
EPSS, predicted over 30 days
Google Chrome 15.0.874.121 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code.
EPSS
1.07%
above median
percentile 62.4%
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
-
Affected ≤15.0.874.121 Fixed in > 15.0.874.121 Latest tracked - undetermined
-
Vulnerable CPE configurations (2)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | ≤15.0.874.121 | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | ≤15.0.874.121 | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |