CVE-2011-1291: Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to c...

Security readout for executives and security teams

This is an old Google Chrome vulnerability in versions before 10.0.648.204. The public record says a remote attacker could crash the browser, with unspecified possible additional impact. The available sources do not provide CVSS, exploit detail, or evidence of active exploitation. Exposure is likely limited to systems still running obsolete Chrome versions before 10.0.648.204. Modern managed endpoints should be unaffected if Chrome is current, but legacy images, kiosks, or unmanaged workstations should be checked. Treat this as a legacy exposure cleanup item, not an emergency, unless obsolete Chrome exists in the environment. The business risk is mainly unmanaged browser inventory and unsupported systems. Mitigation focus: Upgrade Chrome installations to 10.0.648.204 or later.; Remove or isolate unsupported legacy Chrome builds from production endpoints.; Check Google or Chromium guidance for any vendor-specific remediation notes..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.