Vulnerability in Google Chrome
CVE-2010-4041
The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.
EPSS: 0.018 (75.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Google Chrome
- Linux Linux_kernel
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, Not Applicable, x_refsource_VUPEN)
- cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Mailing List, Issue Tracking, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM, Release Notes, Vendor Advisory)
Frequently asked questions
- What is CVE-2010-4041?
- CVE-2010-4041 is a critical-severity vulnerability in Google Chrome. CVSS score: 9.8/10. Published 2010-10-21.
- How severe is CVE-2010-4041?
- Critical severity. CVSS v3 base score is 9.8 out of 10.