CVE-2011-1465: Google Chrome

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

The SPDY implementation in net/http/http_network_transaction.cc in Google Chrome before 11.0.696.14 drains the bodies from SPDY responses, which might allow remote SPDY servers to cause a denial of service (application exit) by canceling a stream.

Affected products

  • Google Chrome: before 11.0.696.14 (fixed in 11.0.696.14)

Published 2011-03-20. Last modified 2026-06-16.