CVE-2011-0478: Google Chrome

High severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

Affected products

• Google Chrome: before 8.0.552.237 (fixed in 8.0.552.237)
• Google Chrome OS: before 8.0.552.344 (fixed in 8.0.552.344)

Published 2011-01-14. Last modified 2026-06-16.