CVE-2011-1810

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-06-09 · updated 2026-06-16
Weakness: CWE-200

Description

The Cascading Style Sheets (CSS) implementation in Google Chrome before 12.0.742.91 does not properly restrict access to the visit history, which allows remote attackers to obtain sensitive information via unspecified vectors.

Affected products

Google Chrome: before 12.0.742.91 — fixed in 12.0.742.91

How to fix

Upgrade to a fixed version: Google Chrome 12.0.742.91. Check the vendor advisory for mitigations.

References

http://code.google.com/p/chromium/issues/detail?id=75643
http://googlechromereleases.blogspot.com/2011/06/chrome-stable-release.html
http://osvdb.org/72780
http://secunia.com/advisories/44829
http://www.securityfocus.com/bid/48129
https://exchange.xforce.ibmcloud.com/vulnerabilities/67893
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14433
http://code.google.com/p/chromium/issues/detail?id=75643
http://googlechromereleases.blogspot.com/2011/06/chrome-stable-release.html
http://osvdb.org/72780
http://secunia.com/advisories/44829
http://www.securityfocus.com/bid/48129

Get alerted when CVE-2011-1810 or the next vulnerability affects your stack