Every CVE Search/ Get API key

CVE-2010-3417

Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension...

5.0 Medium

Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension history, which allows attackers to obtain potentially sensitive information via unspecified vectors.

Exploit likelihood

0.65%Down 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension history, which allows attackers to obtain potentially sensitive information via unspecified vectors.

Record
CVE-2010-3417
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension history, which allows attackers to obtain potentially sensitive information via unspecified vectors.

Record
CVE-2010-3417
Updated
2026-11-02
EUVDEUVD-2010-3415 No score

Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension history, which allows attackers to obtain potentially sensitive information via unspecified vectors.

Record
EUVD-2010-3415
Updated
2026-11-03
GitHub AdvisoriesGHSA-f7qv-f82g-445f No score

Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension...

Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension history, which allows attackers to obtain potentially sensitive information via unspecified vectors.

Record
GHSA-f7qv-f82g-445f
Weakness
CWE-200
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-3417 is a medium vulnerability (CVSS 5.0) in Google Chrome, published September 16, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.65%, the 51st percentile. No source names a fixed version.

References

MoveEnter Open