CVE-2011-2345: The NPAPI implementation in Google Chrome before 12.0.742.112 does not properly handle strings, which allow...

Security readout for executives and security teams

This is an old Google Chrome flaw where the browser’s NPAPI handling could crash when processing malformed string data. The known impact is denial of service, not confirmed data theft or code execution. Business urgency is mainly for environments still running Chrome before 12.0.742.112 or preserving legacy NPAPI-dependent browser setups. Likely exposure is limited to legacy systems running Google Chrome before 12.0.742.112. Modern Chrome deployments are unlikely to be affected, but vulnerability managers should verify old desktop images, kiosks, application compatibility environments, and archived golden images where browser versions may be frozen. Low to moderate priority unless legacy Chrome remains in use. The vulnerability is old and not KEV-listed, but remote browser crashes can still disrupt unmanaged or frozen environments. Prioritize discovery and cleanup of obsolete browser installations. Mitigation focus: Upgrade Chrome to 12.0.742.112 or later per Google stable channel guidance.; Inventory legacy systems for Chrome versions older than 12.0.742.112.; Retire or isolate legacy browser environments that cannot be updated..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.