The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a "Universal XSS (UXSS)" issue.
Loading...
Loading...
The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a "Universal XSS (UXSS)" issue.
March 9, 2012
April 29, 2026
See which npm, PyPI, Go, and Maven packages are affected by CVE-2011-3046
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.