CVE-2011-1460
CRITICALBlink < M11 - Use-After-Free via Anonymous Block Rendering
Title source: llmDescription
WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks.
References (3)
Core 3
Core References
Exploit, Mailing List, Vendor Advisory x_refsource_misc
https://bugs.chromium.org/p/chromium/issues/detail?id=76784
Mailing List, Patch, Vendor Advisory x_refsource_misc
http://trac.webkit.org/changeset/81648
Mailing List, Patch, Vendor Advisory x_refsource_misc
http://trac.webkit.org/changeset/81748
Scores
CVSS v3
9.8
EPSS
0.0091
EPSS Percentile
55.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-704
Status
published
Products (1)
google/blink
< m11
Published
Nov 05, 2019
Tracked Since
Feb 18, 2026