CVE-2011-3898: Google Chrome before 15.0.874.120, when Java Runtime Environment (JRE) 7 is used, does not request user con...

Security readout for executives and security teams

This is an old Chrome and Java exposure. When Chrome before 15.0.874.120 was used with JRE 7, Java applets could begin running without the expected user confirmation. The public record says impact was unspecified, so urgency depends on whether any legacy desktops still run that combination. Exposure is likely limited to legacy systems running Chrome older than 15.0.874.120 with JRE 7 applet capability present. Modern managed browser fleets are unlikely to be exposed unless old virtual desktops, kiosks, lab systems, or archived build images remain in use. Handle as legacy risk cleanup rather than an emergency, unless inventory finds old Chrome with JRE 7 still in production. The business concern is obsolete browser-plugin exposure, not a currently evidenced mass-exploitation event. Mitigation focus: Upgrade Chrome to 15.0.874.120 or later where this legacy version exists.; Remove or replace unsupported Chrome and JRE 7 installations.; Disable Java applet support where business systems no longer require it..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.