CVE-2011-3880: Google Chrome

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Google Chrome before 15.0.874.102 does not prevent use of an unspecified special character as a delimiter in HTTP headers, which has unknown impact and remote attack vectors.

Affected products

• Google Chrome: before 15.0.874.102 (fixed in 15.0.874.102)

Published 2011-10-25. Last modified 2026-06-16.