vciy

Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows remote attackers…: 27 records in one advisory

27 records announced together, published between 2011-12-13 and 2012-06-27, every one of them citing the same advisory.

The advisory

Every record in this batch cites http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

22 of 27 records name something of its own. For the other 5, held sources say the same thing about each.

What this page does not cover

This batch is 27 of the 197 records that cite the same advisory. The other 170 are different findings announced alongside it.

90 of them are on the sibling batches linked below. The remaining 80 are grouped with nothing and have only their own record pages.

Other batches under the same advisory: apple-msg00003-4766c1b85e, apple-msg00003-f516930289

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2011-3016counter nodes read-after-free issue
CVE-2011-3021subframe loading
CVE-2011-3032no title held
CVE-2011-3034no title held
CVE-2011-3035no title held
CVE-2011-3038multi-column
CVE-2011-3041class attributes
CVE-2011-3043flexbox flexible box conjunction
CVE-2011-3044animation
CVE-2011-3073resources
CVE-2011-3075style-application commands
CVE-2011-3078cve-2011-3081
CVE-2011-3081cve-2011-3078
CVE-2011-3086no title held
CVE-2011-3924dom selections
CVE-2011-3966token-sequence
CVE-2011-3968token sequences
CVE-2011-3969no title held

27 records, read from the index as it stood on 2026-10-18. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.