Critical severity9.8NVD Advisory· Published Oct 21, 2010· Updated Jun 16, 2026

CVE-2010-4041

Description

The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.

Affected products

Google/Chrome2 versions
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <7.0.517.41
- (no CPE)range: <7.0.517.41

Patches

Vulnerability mechanics

References

code.google.com/p/chromium/issues/detailnvdIssue TrackingMailing ListPatchVendor Advisory
googlechromereleases.blogspot.com/2010/10/stable-channel-update.htmlnvdRelease NotesVendor Advisory
www.securityfocus.com/bid/44241nvdThird Party AdvisoryVDB Entry
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14201nvdThird Party Advisory
secunia.com/advisories/41888nvdBroken Link
www.vupen.com/english/advisories/2010/2731nvdNot Applicable

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000