CVE-2011-1204: Google Chrome before 10.0.648.127 does not properly handle attributes, which allows remote attackers to cau...

Security readout for executives and security teams

This is an old Google Chrome vulnerability in how the browser handled document attributes. A crafted document could corrupt the DOM tree, causing a crash or possibly other unspecified impact. The source bundle confirms Chrome versions before 10.0.648.127 are affected, but does not provide a CVSS score or confirmed active exploitation. Most exposure would be legacy systems still running Chrome before 10.0.648.127, or potentially downstream WebKit-based products identified by vendor advisories. Modern managed endpoints should have low exposure if browsers are supported and patched. The provided bundle does not enumerate affected Apple product versions. Treat this as a legacy hygiene issue unless obsolete browsers remain in production. The business risk is highest where old browser builds are used for critical workflows, kiosks, or unmanaged systems. No source in the bundle supports emergency response for active exploitation. Mitigation focus: Upgrade Chrome to 10.0.648.127 or a currently supported release.; Remove unsupported Chrome builds from managed endpoints and legacy images.; Check referenced Apple advisories for any relevant WebKit-based product guidance..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.