CVE-2011-3079: Google Chrome

High severity, CVSS 10.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors.

Affected products

• Google Chrome: up to and including 18.0.1025.166
• Mozilla Firefox: up to and including 31.6; up to and including 37.0.2
• Mozilla Seamonkey: up to and including 2.33.0
• Mozilla Thunderbird: up to and including 31.6; up to and including 38.0
• Opensuse Opensuse: version 13.1 only; version 13.2 only

Published 2012-05-01. Last modified 2026-06-16.