VYPR
Unrated severityNVD Advisory· Published Jun 15, 2010· Updated Apr 29, 2026

CVE-2010-2298

CVE-2010-2298

Description

browser/renderer_host/database_dispatcher_host.cc in Google Chrome before 5.0.375.70 on Linux does not properly handle ViewHostMsg_DatabaseOpenFile messages in chroot-based sandboxing, which allows remote attackers to bypass intended sandbox restrictions via vectors involving fchdir and chdir calls.

Affected products

1
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
    Range: <5.0.375.70

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.