Unrated severityNVD Advisory· Published Sep 16, 2010· Updated Jun 16, 2026

CVE-2010-3417

Description

Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension history, which allows attackers to obtain potentially sensitive information via unspecified vectors.

Affected products

Google/Chrome2 versions
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <6.0.472.59
- (no CPE)range: <6.0.472.59

Patches

Vulnerability mechanics

References

code.google.com/p/chromium/issues/detailnvdPatchVendor Advisory
googlechromereleases.blogspot.com/2010/09/stable-beta-channel-updates_14.htmlnvdVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7371nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000