CVE-2011-3903: Google Chrome

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

Google Chrome before 16.0.912.63 does not properly perform regex matching, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Affected products

• Google Chrome: before 16.0.912.63 (fixed in 16.0.912.63)

Published 2011-12-13. Last modified 2026-06-16.