CVE-2011-3956

The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the…

published February 9, 2012

CVSS
—
EPSS
1%
Percentile
50.6
In the wild
Unconfirmed
What it is

The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00659 · 50.6th percentile
Published
2012-02-09T02:00Z
EPSS history
Timeline
  • 09 FEB 02:00Z
    The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the…
    cvelistv5