Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerability · NVD

CVE-2010-1824

CVE-2010-1824, Severity pending severity (CVSS —): 4 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS)
-
Exploitation
4.0 %

EPSS, predicted over 30 days

Tracked apps
4
Still exposed
0

Use-after-free vulnerability in WebKit, as used in Apple iTunes before 10.2 on Windows, Apple Safari, and Google Chrome before 6.0.472.59, allows remote attackers to execute arbitrary code or cause a denial of service via vectors related to SVG styles, the DOM tree, and error messages.

EPSS 3.96% above median percentile 90.3%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

  • Chrome macOS com.google.Chrome
    Affected <6.0.472.59 Fixed in 6.0.472.59 Latest tracked 155.0.8059.40 patched
  • Google Chrome Windows winget:Google.Chrome
    Affected <6.0.472.59 Fixed in 6.0.472.59 Latest tracked 155.0.8059.85 patched
  • iTunes Windows winget:Apple.iTunes
    Affected <10.2 Fixed in 10.2 Latest tracked 12.13.11.1 patched
  • iTunes macOS macos:com.apple.iTunes
    Affected <10.2 Fixed in 10.2 Latest tracked - undetermined
Vulnerable CPE configurations (4)
Vendor Product Versions
google chrome
All platforms (wildcard)
 <6.0.472.59
google chrome
All platforms (wildcard)
 <6.0.472.59
apple itunes
All platforms (wildcard)
 <10.2
apple itunes
All platforms (wildcard)
 <10.2
View on NVD ↗ Advisory · code.google.com Advisory · googlechromereleases.blogspot.com

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM