What’s Vulnerable › Vulnerabilities

CVE-2011-2808

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-06 · updated 2026-06-16
• Weakness: CWE-20

Description

A stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a child of a keygen with autofocus is accessed.

Affected products

• Google Blink: before m13 — fixed in m13

How to fix

Upgrade to a fixed version: Google Blink m13. Check the vendor advisory for mitigations.

References

• http://code.google.com/p/chromium/issues/detail?id=82063
• http://trac.webkit.org/browser/trunk/Source/WebCore/rendering/RenderObject.h?rev=86705#L1044
• http://trac.webkit.org/changeset/86976
• http://trac.webkit.org/changeset/90568
• http://trac.webkit.org/changeset/90848
• https://bugs.chromium.org/p/chromium/issues/detail?id=83672
• https://bugs.webkit.org/show_bug.cgi?id=57091
• http://code.google.com/p/chromium/issues/detail?id=82063
• http://trac.webkit.org/browser/trunk/Source/WebCore/rendering/RenderObject.h?rev=86705#L1044
• http://trac.webkit.org/changeset/86976
• http://trac.webkit.org/changeset/90568
• http://trac.webkit.org/changeset/90848

Get alerted when CVE-2011-2808 or the next vulnerability affects your stack