CVE-2011-2783: Google Chrome

Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days.

Google Chrome before 13.0.782.107 does not ensure that developer-mode NPAPI extension installations are confirmed by a browser dialog, which makes it easier for remote attackers to modify the product's functionality via a Trojan horse extension.

Affected products

• Google Chrome: before 13.0.782.107 (fixed in 13.0.782.107)

Published 2011-08-03. Last modified 2026-06-16.