CVE-2011-1293: Use-after-free vulnerability in the HTMLCollection implementation in Google Chrome before 10.0.648.204 allo...

Security readout for executives and security teams

CVE-2011-1293 is an old browser memory-safety flaw in Google Chrome before 10.0.648.204. A malicious remote party could crash the browser, and the CVE record says other impact may have been possible, but the public bundle does not define vectors or reliable exploitation details. Exposure is most likely limited to legacy Google Chrome installations before 10.0.648.204. Debian and Apple advisory references suggest downstream packaging or bundled component relevance, but exact affected downstream products and versions must be confirmed from those vendor advisories. Low for modern environments, because the issue is from 2011 and no active exploitation evidence is supplied. Raise priority if legacy browsers remain in use, especially on systems that browse external websites or process untrusted HTML. Mitigation focus: Upgrade Chrome to 10.0.648.204 or later where applicable.; Check Debian and Apple advisories for downstream package-specific guidance.; Remove or isolate unsupported legacy browser installations..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.