CVE-2010-2296
google chrome: no CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days.
The implementation of unspecified DOM methods in Google Chrome before 5.0.375.70 allows remote attackers to bypass the Same Origin Policy via unknown vectors.
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- google:chrome
References
- http://code.google.com/p/chromium/issues/detail?id=39985
- http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html
- http://secunia.com/advisories/40072
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12080
- http://code.google.com/p/chromium/issues/detail?id=39985