CVE-2011-3971: Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows user-assisted remote attackers to c...

Security readout for executives and security teams

CVE-2011-3971 is an old Google Chrome memory safety issue fixed before version 17.0.963.46. A victim would need to interact with attacker-controlled content involving mousemove events. The known impact is browser denial of service, with other unspecified impact possible, but the supplied sources do not provide CVSS scoring or confirmed exploitation. Exposure is most likely limited to legacy systems running Google Chrome earlier than 17.0.963.46. The bundle does not identify affected CPEs or specific Apple products, despite Apple references. Modern managed endpoints are unlikely to be affected unless old browser builds remain in images, labs, kiosks, or unsupported systems. Treat this as a legacy hygiene issue unless vulnerable Chrome versions are still present. It does not warrant emergency response from the supplied evidence, but any discovered affected browsers should be removed or updated because browser memory bugs can create disproportionate business risk. Mitigation focus: Upgrade Google Chrome to 17.0.963.46 or later where applicable.; Remove unsupported legacy Chrome builds from endpoints and golden images.; Check vendor advisories before assuming Apple product impact..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.