CVE-2011-2795: Google Chrome

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Google Chrome before 13.0.782.107 does not prevent calls to functions in other frames, which allows remote attackers to bypass intended access restrictions via a crafted web site, related to a "cross-frame function leak."

Affected products

• Google Chrome: before 13.0.782.107 (fixed in 13.0.782.107)

Published 2011-08-03. Last modified 2026-06-16.