CVE-2009-3268: Google Chrome

Medium severity, CVSS 5.0. EPSS: 0.8% chance of exploitation in the next 30 days.

Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828.

Affected products

• Google Chrome: up to and including 1.0.154.48; version 0.2.149.27 only; version 0.2.149.29 only; version 0.2.149.30 only; version 0.2.152.1 only; version 0.2.153.1 only; …

Published 2009-09-18. Last modified 2026-06-16.