Detections
Analytics

CVE-2011-3054

critical

Description

The WebUI privilege implementation in Google Chrome before 17.0.963.83 does not properly perform isolation, which allows remote attackers to bypass intended access restrictions via unspecified vectors.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15028

https://exchange.xforce.ibmcloud.com/vulnerabilities/74214

http://www.securitytracker.com/id?1026841

http://www.securityfocus.com/bid/52674

http://security.gentoo.org/glsa/glsa-201203-19.xml

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00000.html

https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-3022

http://secunia.com/advisories/48527

http://secunia.com/advisories/48512

http://osvdb.org/80292

http://googlechromereleases.blogspot.com/2012/03/stable-channel-update_21.html

http://code.google.com/p/chromium/issues/detail?id=117418

Details

Source: Mitre, NVD

Published: 2012-03-22

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00656