CVE-2010-0650
WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to...
WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event.
Exploit likelihood
What each source reports
NVD Score used
WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event.
- Record
CVE-2010-0650- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event.
- Record
CVE-2010-0650- Updated
- 2026-11-02
EUVDEUVD-2010-0681 No score
WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event.
- Record
EUVD-2010-0681- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3hxx-7wff-xwh8 No score
WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to...
WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event.
- Record
GHSA-3hxx-7wff-xwh8- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0650 is a low vulnerability (CVSS 2.6) in Apple Safari, published February 18, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.51%, the 84th percentile. No source names a fixed version.
References
mandriva.com/security/advisories?name=MDVSA-2011:039
securityfocus.com/bid/38373
googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html
vupen.com/english/advisories/2010/2722
secunia.com/advisories/43068
ubuntu.com/usn/USN-1006-1
Show 11 moreShow less
code.google.com/p/chromium/issues/detail?id=3275
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13791
securitytracker.com/id?1023506
sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
bugs.webkit.org/show_bug.cgi?id=21501
nvd.nist.gov/vuln/detail/CVE-2010-0650
github.com/advisories/GHSA-3hxx-7wff-xwh8