CVE-2011-2785: Google Chrome

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

The extensions implementation in Google Chrome before 13.0.782.107 does not properly validate the URL for the home page, which allows remote attackers to have an unspecified impact via a crafted extension.

Affected products

• Google Chrome: before 13.0.782.107 (fixed in 13.0.782.107)

Published 2011-08-03. Last modified 2026-06-16.