CVE-2010-0661
WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google...
WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.
Exploit likelihood
What each source reports
NVD Score used
WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.
- Record
CVE-2010-0661- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.
- Record
CVE-2010-0661- Updated
- 2026-11-02
EUVDEUVD-2010-0692 No score
WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.
- Record
EUVD-2010-0692- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p5w3-55x8-h8jw No score
WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google...
WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.
- Record
GHSA-p5w3-55x8-h8jw- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0661 is a medium vulnerability (CVSS 6.8) in Apple Webkit, published February 18, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.59%, the 75th percentile. No source names a fixed version.
References
googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html
secunia.com/advisories/43068
vupen.com/english/advisories/2011/0212
securitytracker.com/id?1023506
sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
code.google.com/p/chromium/issues/detail?id=30660
Show 7 moreShow less
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
flock.com/security
bugs.webkit.org/show_bug.cgi?id=32647
trac.webkit.org/changeset/52401
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14482
nvd.nist.gov/vuln/detail/CVE-2010-0661
github.com/advisories/GHSA-p5w3-55x8-h8jw