CVE-2011-2171
CVE-2011-2171 is a critical-severity vulnerability in Google Chrome Os with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Critical (CVSS 2.0 base score 10.0)
- EPSS exploit prediction: 1% (48th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Google Chrome Os
- Published:
- Last modified:
Description
Unspecified vulnerability in the dbugs package in Google Chrome OS before R12 0.12.433.38 Beta has unknown impact and attack vectors.
Frequently asked questions
- What is CVE-2011-2171?
- Unspecified vulnerability in the dbugs package in Google Chrome OS before R12 0.12.433.38 Beta has unknown impact and attack vectors.
- How severe is CVE-2011-2171?
- CVE-2011-2171 has a CVSS 2.0 base score of 10.0, rated critical severity.
- Is CVE-2011-2171 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (48th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2011-2171?
- CVE-2011-2171 primarily affects Google Chrome Os. In total, 31 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2011-2171?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2011-2171 published?
- CVE-2011-2171 was published on 2011-05-24 and last updated on 2026-06-16.
References
Affected products (31)
- cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.9.126.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.10.142.3:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.10.146.1:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.10.156.1:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.10.156.4:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.10.156.18:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.10.156.20:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.10.156.30:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.10.156.34:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.10.156.36:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.10.156.46:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.10.156.50:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.10.156.54:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.11.227.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.11.257.3:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.11.257.14:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.11.257.18:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.11.257.32:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.11.257.39:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.11.257.44:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.11.257.91:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.12.362.2:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.12.397.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.12.433.9:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.12.433.14:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.12.433.22:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:0.12.433.28:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:8.0.552.342:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:8.0.552.343:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:8.0.552.344:*:*:*:*:*:*:*
More vulnerabilities in Google Chrome Os
- CVE-2014-3188 — Critical (CVSS 10.0): Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and…
- CVE-2014-1708 — Critical (CVSS 10.0): The boot implementation in Google Chrome OS before 33.0.1750.152 does not properly consider file persistence, which…
- CVE-2013-2833 — Critical (CVSS 10.0): Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to…
- CVE-2013-0915 — Critical (CVSS 10.0): The GPU process in Google Chrome OS before 25.0.1364.173 allows attackers to cause a denial of service or possibly have…
- CVE-2012-2864 — Critical (CVSS 10.0): Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook…
- CVE-2012-4050 — Critical (CVSS 10.0): Multiple unspecified vulnerabilities in Google Chrome OS before 21.0.1180.50 on the Cr-48 and Samsung Series 5 and 5…