CVE-2011-2599: Google Chrome 11 does not block use of a cross-domain image as a WebGL texture, which allows remote attacke...

Security readout for executives and security teams

CVE-2011-2599 is an old Google Chrome 11 WebGL privacy flaw. A malicious web page could use WebGL timing behavior to infer approximate copies of cross-domain images that the browser should not expose. The sources do not provide CVSS scoring, a fixed version, or evidence of active exploitation. Exposure is most plausible in environments still running Google Chrome 11 or preserving legacy browser images. Modern managed endpoints are unlikely to be affected if they run supported browser versions, but the provided sources do not define a full affected-version range beyond Chrome 11. Low immediate urgency for normal modern fleets, but legacy-browser pockets should be eliminated. The business issue is unintended cross-origin image exposure from obsolete browser behavior, not a current confirmed exploitation campaign based on the supplied sources. Mitigation focus: Identify any Chrome 11 installations in endpoint and legacy system inventories.; Replace obsolete Chrome 11 with a supported browser following vendor guidance.; Check vendor advisories for the authoritative fixed-version history..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.