CVE-2011-2874: Google Chrome

Medium severity, CVSS 6.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Google Chrome before 14.0.835.163 does not perform an expected pin operation for a self-signed certificate during a session, which has unspecified impact and remote attack vectors.

Affected products

• Google Chrome: before 14.0.835.163 (fixed in 14.0.835.163)

Published 2011-09-19. Last modified 2026-06-16.