CVE-2011-3964: Google Chrome

Medium severity, CVSS 5.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors.

Affected products

• Google Chrome: before 17.0.963.46 (fixed in 17.0.963.46)

Published 2012-02-09. Last modified 2026-06-16.