Unrated severityNVD Advisory· Published Feb 4, 2011· Updated Jun 16, 2026

CVE-2011-0778

Description

Google Chrome before 9.0.597.84 does not properly restrict drag and drop operations, which might allow remote attackers to bypass the Same Origin Policy via unspecified vectors.

Affected products

Google/Chrome2 versions
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <=9.0.597.83
- (no CPE)range: <9.0.597.84

Patches

Vulnerability mechanics

References

googlechromereleases.blogspot.com/2011/02/stable-channel-update.htmlnvdVendor Advisory
code.google.com/p/chromium/issues/detailnvd
lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.htmlnvd
secunia.com/advisories/43368nvd
www.debian.org/security/2011/dsa-2166nvd
www.debian.org/security/2011/dsa-2188nvd
www.vupen.com/english/advisories/2011/0408nvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14228nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000