Information disclosure in Google Chrome

CVE-2010-5069

The Cascading Style Sheets (CSS) implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264.

Vulnerability class: Information Disclosure

EPSS: 0.008 (53.6th percentile) — read the EPSS interpretation.

Affected products

  • Google Chrome — versions 4.0.212.0, 4.0.212.1, 4.0.221.8
  • N/a — versions n/a

Weakness classification (CWE)

References