Every CVE Search/ Get API key

CVE-2010-1230

Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web...

10.0 High

Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors.

Exploit likelihood

1.47%Up 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors.

Record
CVE-2010-1230
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors.

Record
CVE-2010-1230
Updated
2026-11-02
EUVDEUVD-2010-1260 No score

Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors.

Record
EUVD-2010-1260
Updated
2026-11-03
GitHub AdvisoriesGHSA-8rxx-w4c2-47ch No score

Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web...

Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors.

Record
GHSA-8rxx-w4c2-47ch
Weakness
CWE-200
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-1230 is a high vulnerability (CVSS 10.0) in Google Chrome, published April 1, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. No source names a fixed version.

References

MoveEnter Open