Information disclosure in Google Chrome

CVE-2010-3118

The autosuggest feature in the Omnibox implementation in Google Chrome before 5.0.375.127 does not anticipate entry of passwords, which might allow remote attackers to obtain sensitive information by reading the network traffic generated by this feature.

Vulnerability class: Information Disclosure

EPSS: 0.009 (55.3th percentile) — read the EPSS interpretation.

Affected products

Google Chrome
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch, Issue Tracking, Vendor Advisory)
cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)