CVE-2011-2169: google chrome_os
CVSS: 7.2v2.0HighModified
Published 24-05-2011Last modified 16-09-2024
Vulnerability summary
CVE-2011-2169 is a high (CVSS 7.2) vulnerability in google chrome_os. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 6.4% of scored vulnerabilities.
CVSS score
7.2/10
010
High · v2.0 (NVD)EPSS score
0.17%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 24-05-2011PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Google Chrome OS before R12 0.12.433.38 Beta allows local users to gain privileges by creating a /var/lib/chromeos-aliases.conf file and placing commands in it.
CVSS metrics
1 score · 1 source · 1 versionHigh 7.2Preferred score · NVD (NIST)
AV:L/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
0.17%
Chance of exploitation in the next 30 days
Percentile
6%
Versus all other CVEs
30-day change
0.00 pp
From 0.17% on 18-09-2026
18-09-202618-10-2026
EPSS score0.17%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Google1 product
- chrome_os≤ 0.12.433.35 | 0.9.126.0 | 0.10.142.3 | 0.10.146.1 | 0.10.156.1 | 0.10.156.4 | 0.10.156.18 | 0.10.156.20 | 0.10.156.30 | 0.10.156.34 | 0.10.156.36 | 0.10.156.46 | 0.10.156.50 | 0.10.156.54 | 0.11.227.0 | 0.11.257.3 | 0.11.257.14 | 0.11.257.18 | 0.11.257.32 | 0.11.257.39 | 0.11.257.44 | 0.11.257.91 | 0.12.362.2 | 0.12.397.0 | 0.12.433.9 | 0.12.433.14 | 0.12.433.22 | 0.12.433.28 | 8.0.552.342 | 8.0.552.343 | 8.0.552.344
1 vendor · 1 product
References
1 links- googlechromereleases.blogspot.com/2011/05/chrome-os-beta-channel-update_16.htmlX Refsource CONFIRMVendor Advisory