Read the docs
TI-2011-02040 Aliases CVE-2011-2334GHSA-576h-8966-v2qv

Use after free in Google Chrome

Priority LOW 29CWE-416Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-416 and the CVSS impact.

Summary

Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections.

Why it matters now

EPSS 0.00471 40th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
GoogleChromebefore Blink M12—No fix listedCNA
  • Chrome VendorGoogle Affected before Blink M12 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:google:blink:*:*:*:*:*:chromium:*:*before m12VulnerableGoogle
  • cpe:2.3:a:google:blink:*:*:*:*:*:chromium:*:* Versions before m12 Vulnerable ·Google

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-2334
  2. 2026-10-03 Alias added: GHSA-576h-8966-v2qv

References

Other 2

  • TI-2011-02043 A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms. CVSS 3.1CRITICAL 9.8
  • TI-2011-01282 WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks. CVSS 3.1CRITICAL 9.8
  • TI-2011-02041 A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function. CVSS 3.1HIGH 7.5
  • TI-2011-01139 An Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS… CVSS 3.1HIGH 7.5
  • TI-2011-02465 Improper input validation in Google Chrome CVSS 3.1MEDIUM 6.5
  • TI-2011-02058 Use after free in Google Chrome CVSS 3.1MEDIUM 6.5
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences