Unscored severity · published Feb 18, 2010
CVE-2010-0661
WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via…
–
CVSS
1.6%
EPSS
No
On KEV
Description
WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chrome · Google
through 4.0.249.0; 0.2.149.27; 0.2.149.29; 0.2.149.30; 0.2.152.1; 0.2.153.1; +34 more · source: NVD
WE
Webkit · Apple
52400 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0661
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0661
code.google.com
http://code.google.com/p/chromium/issues/detail?id=30660
flock.com
http://flock.com/security/
Patch
http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
secunia.com
http://secunia.com/advisories/43068
securitytracker.com
http://securitytracker.com/id?1023506
More from Chrome
9.8
CVE-2025-10585
Google Chromium V8 Type Confusion Vulnerability
9.8
CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
9.6
CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-5274
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-4947
Google Chromium V8 Type Confusion Vulnerability