CVE-2011-0471: google chrome Improper Input Validation

EPSS trend

Probability

2.41%

Chance of exploitation in the next 30 days

Percentile

84%

Versus all other CVEs

30-day change

0.00 pp

From 2.41% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.41%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

8 links

googlechromereleases.blogspot.com/2011/01/chrome-stable-release.htmlX Refsource CONFIRMVendor Advisory
www.securityfocus.com/bid/45788VDB EntryX Refsource BIDThird Party Advisory
code.google.com/p/chromium/issues/detail?id=65764X Refsource CONFIRMPermissions Required
osvdb.org/70454VDB EntryX Refsource OSVDBBroken Link
www.srware.net/forum/viewtopic.php?f=18&t=2054X Refsource CONFIRMThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/64662VDB EntryX Refsource XFThird Party Advisory
secunia.com/advisories/42951Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13710VDB EntrySignatureX Refsource OVALThird Party Advisory

Related vulnerabilities

CVE-2013-2832googlechrome_os0.92%13y ago16-04-2013 20:00The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS before 26.0.1410.57 does not prevent uninitialized data from remaining in a buffer, which might allow remote attackers to obtain sensitive information via unspecified vectors.CVE-2013-2834googlechrome_os0.90%13y ago16-04-2013 20:00Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2835.CVE-2013-2833googlechrome_os1.61%13y ago16-04-2013 20:00Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper management of ownership relationships involving Elements and DrawElements.CVE-2013-2835googlechrome_os0.69%13y ago16-04-2013 20:00Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2834.CVE-2013-0927googlechrome_os0.83%13y ago10-04-2013 16:00Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGO_RC_FILE environment variable, which allows attackers to bypass intended access restrictions via crafted configuration data.CVE-2025-2509googlechrome_os+10.11%1y ago06-05-2025 00:59Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process, potentially leading to VM escape via crafted vertex elements data triggering an out-of-bounds read in util_format_description.

All vulnerabilities inchrome chrome_os

CVE-2011-0471: google chrome Improper Input Validation

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References