CVE-2011-2335

HIGH

Blink < M12 - Use-After-Free in CSSSelector

Title source: llm
STIX 2.1

Description

A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function.

References (2)

Core 2
Core References
Various Sources x_refsource_misc
https://trac.webkit.org/changeset/80155/webkit

Scores

CVSS v3 7.5
EPSS 0.0060
EPSS Percentile 44.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-415
Status published
Products (1)
google/blink < m12
Published Nov 12, 2019
Tracked Since Feb 18, 2026