CVE-2011-2358

CVE-2011-2358 describes a vulnerability in Google Chrome versions prior to 13.0.782.107, where the browser failed to require user confirmation for extension installations. This oversight allowed remote attackers to more easily install malicious "Trojan horse" extensions, thereby modifying the browser's functionality without explicit user consent. The vulnerability has a CVSS score of 6.8, indicating a medium severity with a network attack vector, medium attack complexity, and potential for partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the CISA KEV catalog, though it garnered some community discussion and media coverage at the time.