CVE-2011-4691: Google Chrome 15.0.874.121 and earlier does not prevent capture of data about the times of Same Origin Poli...

Security readout for executives and security teams

This CVE describes a browser privacy weakness in Google Chrome 15.0.874.121 and earlier. A malicious webpage could infer whether certain documents were already in the browser cache by measuring timing around blocked iframe loads. The public bundle does not provide CVSS, confirmed active exploitation, or vendor remediation details. Exposure is most plausible where legacy Chrome 15.0.874.121 or earlier is still usable. Modern managed desktop fleets are unlikely to run this version, but old kiosks, embedded systems, lab images, or unmanaged endpoints should be checked. Treat this as a legacy-browser hygiene issue, not an emergency response item. Priority should rise only if the organization still operates affected Chrome versions in environments handling sensitive browsing activity. Mitigation focus: Identify and retire Chrome 15.0.874.121 and earlier installations.; Move users to supported Chrome or Chromium-based browser versions.; Check vendor guidance and historical advisories for the fixed release boundary..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.