CVE-2010-0651
No CVSS score yet. EPSS 1.8% chance of exploitation in the next 30 days.
WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5, permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:safari
- apple:webkit
- google:chrome
References
- http://code.google.com/p/chromium/issues/detail?id=9877
- http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
- http://scarybeastsecurity.blogspot.com/2009/12/generic-cross-browser-cross-domain.html
- http://secunia.com/advisories/41856