Unrated severityNVD Advisory· Published Dec 22, 2010· Updated Jun 16, 2026

CVE-2010-4576

Description

browser/worker_host/message_port_dispatcher.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 does not properly handle certain postMessage calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code that creates a web worker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Chrome2 versions
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <8.0.552.224
- (no CPE)range: <8.0.552.224
Google/ChromeOS2 versions
cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*range: <8.0.552.343
- (no CPE)range: <8.0.552.343

Patches

Vulnerability mechanics

References

src.chromium.org/viewvc/chromenvdPatchVendor Advisory
code.google.com/p/chromium/issues/detailnvdExploitPatchVendor Advisory
googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.htmlnvdVendor Advisory
secunia.com/advisories/42648nvdThird Party Advisory
www.gentoo.org/security/en/glsa/glsa-201012-01.xmlnvdThird Party Advisory
www.securityfocus.com/bid/45390nvdThird Party AdvisoryVDB Entry
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14161nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000