Vulnerability · NVD
CVE-2010-3417
CVE-2010-3417, Severity pending severity (CVSS —): 2 tracked apps concerned, all fixed or indeterminable on their current version.
- Severity (CVSS)
- -
- Exploitation
- 0.6 %
- Tracked apps
- 2
- Still exposed
- 0
EPSS, predicted over 30 days
Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension history, which allows attackers to obtain potentially sensitive information via unspecified vectors.
EPSS
0.65%
exploit very unlikely
percentile 48.4%
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
-
Affected <6.0.472.59 Fixed in 6.0.472.59 Latest tracked - undetermined
-
Vulnerable CPE configurations (2)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | <6.0.472.59 | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | <6.0.472.59 | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |