CVE-2010-0647
WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to...
WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed RUBY element, as demonstrated by a <ruby>><table><rt> sequence.
Exploit likelihood
What each source reports
NVD Score used
WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed RUBY element, as demonstrated by a <ruby>><table><rt> sequence.
- Record
CVE-2010-0647- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed RUBY element, as demonstrated by a <ruby>><table><rt> sequence.
- Record
CVE-2010-0647- Updated
- 2026-11-02
EUVDEUVD-2010-0678 No score
WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed RUBY element, as demonstrated by a <ruby>><table><rt> sequence.
- Record
EUVD-2010-0678- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jpp6-jhf5-8fqg No score
WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to...
WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed RUBY element, as demonstrated by a <ruby>><table><rt> sequence.
- Record
GHSA-jpp6-jhf5-8fqg- Weakness
- CWE-94
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0647 is a high vulnerability (CVSS 9.3) in Apple Webkit, published February 18, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.88%, the 90th percentile. No source names a fixed version.
References
mandriva.com/security/advisories?name=MDVSA-2011:039
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14094
securityfocus.com/bid/38177
osvdb.org/62317
vupen.com/english/advisories/2010/2722
secunia.com/advisories/43068
Show 16 moreShow less
ubuntu.com/usn/USN-1006-1
sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
exchange.xforce.ibmcloud.com/vulnerabilities/56214
securitytracker.com/id?1023583
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
bugs.webkit.org/show_bug.cgi?id=33266
trac.webkit.org/changeset/53525
code.google.com/p/chromium/issues/detail?id=31692
googlechromereleases.blogspot.com/2010/02/stable-channel-update.html
nvd.nist.gov/vuln/detail/CVE-2010-0647
github.com/advisories/GHSA-jpp6-jhf5-8fqg