CVE-2011-3106: Google Chrome

High severity, CVSS 10.0. EPSS: 3.7% chance of exploitation in the next 30 days.

The WebSockets implementation in Google Chrome before 19.0.1084.52 does not properly handle use of SSL, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Affected products

• Google Chrome: up to and including 19.0.1084.51; version 19.0.1028.0 only; version 19.0.1029.0 only; version 19.0.1030.0 only; version 19.0.1031.0 only; version 19.0.1032.0 only; …

Published 2012-05-24. Last modified 2026-06-16.