CVE-2010-2441
WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes...
WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295.
Exploit likelihood
What each source reports
NVD Score used
WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295.
- Record
CVE-2010-2441- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295.
- Record
CVE-2010-2441- Updated
- 2026-11-02
EUVDEUVD-2010-2450 No score
WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295.
- Record
EUVD-2010-2450- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rq4x-8v8c-7f6x No score
WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes...
WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295.
- Record
GHSA-rq4x-8v8c-7f6x- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2441 is a medium vulnerability (CVSS 4.3) in Apple Webkit, published June 24, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.90%, the 79th percentile. No source names a fixed version.
References
secunia.com/advisories/43068
lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
vupen.com/english/advisories/2011/0212
bugzilla.mozilla.org/show_bug.cgi?id=552255
nvd.nist.gov/vuln/detail/CVE-2010-2441
github.com/advisories/GHSA-rq4x-8v8c-7f6x