Google Chrome 4.1 BETA before 4.1.249.1036 allows remote attackers to cause a denial of…
Priority LOW 35CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Google Chrome 4.1 BETA before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via an empty SVG element.
Why it matters now
EPSS 0.0105 64th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 33
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:google:chrome:4.1.249.0:*:*:*:*:*:*:* | 4.1.249.0 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1001:*:*:*:*:*:*:* | 4.1.249.1001 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1004:*:*:*:*:*:*:* | 4.1.249.1004 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1006:*:*:*:*:*:*:* | 4.1.249.1006 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1007:*:*:*:*:*:*:* | 4.1.249.1007 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1008:*:*:*:*:*:*:* | 4.1.249.1008 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1009:*:*:*:*:*:*:* | 4.1.249.1009 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1010:*:*:*:*:*:*:* | 4.1.249.1010 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1011:*:*:*:*:*:*:* | 4.1.249.1011 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1012:*:*:*:*:*:*:* | 4.1.249.1012 | Vulnerable |
- cpe:2.3:a:google:chrome:4.1.249.0:*:*:*:*:*:*:* Versions 4.1.249.0 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1001:*:*:*:*:*:*:* Versions 4.1.249.1001 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1004:*:*:*:*:*:*:* Versions 4.1.249.1004 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1006:*:*:*:*:*:*:* Versions 4.1.249.1006 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1007:*:*:*:*:*:*:* Versions 4.1.249.1007 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1008:*:*:*:*:*:*:* Versions 4.1.249.1008 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1009:*:*:*:*:*:*:* Versions 4.1.249.1009 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1010:*:*:*:*:*:*:* Versions 4.1.249.1010 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1011:*:*:*:*:*:*:* Versions 4.1.249.1011 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1012:*:*:*:*:*:*:* Versions 4.1.249.1012 Vulnerable ·Google
Show 23 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:google:chrome:4.1.249.1013:*:*:*:*:*:*:* | 4.1.249.1013 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1014:*:*:*:*:*:*:* | 4.1.249.1014 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1015:*:*:*:*:*:*:* | 4.1.249.1015 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1016:*:*:*:*:*:*:* | 4.1.249.1016 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1017:*:*:*:*:*:*:* | 4.1.249.1017 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1018:*:*:*:*:*:*:* | 4.1.249.1018 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1019:*:*:*:*:*:*:* | 4.1.249.1019 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1020:*:*:*:*:*:*:* | 4.1.249.1020 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1021:*:*:*:*:*:*:* | 4.1.249.1021 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1022:*:*:*:*:*:*:* | 4.1.249.1022 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1023:*:*:*:*:*:*:* | 4.1.249.1023 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1024:*:*:*:*:*:*:* | 4.1.249.1024 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1025:*:*:*:*:*:*:* | 4.1.249.1025 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1026:*:*:*:*:*:*:* | 4.1.249.1026 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1027:*:*:*:*:*:*:* | 4.1.249.1027 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1028:*:*:*:*:*:*:* | 4.1.249.1028 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1029:*:*:*:*:*:*:* | 4.1.249.1029 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1030:*:*:*:*:*:*:* | 4.1.249.1030 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1031:*:*:*:*:*:*:* | 4.1.249.1031 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1032:*:*:*:*:*:*:* | 4.1.249.1032 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1033:*:*:*:*:*:*:* | 4.1.249.1033 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1034:*:*:*:*:*:*:* | 4.1.249.1034 | Vulnerable | |
| cpe:2.3:a:google:chrome:4.1.249.1035:*:*:*:*:*:*:* | 4.1.249.1035 | Vulnerable |
- cpe:2.3:a:google:chrome:4.1.249.1013:*:*:*:*:*:*:* Versions 4.1.249.1013 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1014:*:*:*:*:*:*:* Versions 4.1.249.1014 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1015:*:*:*:*:*:*:* Versions 4.1.249.1015 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1016:*:*:*:*:*:*:* Versions 4.1.249.1016 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1017:*:*:*:*:*:*:* Versions 4.1.249.1017 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1018:*:*:*:*:*:*:* Versions 4.1.249.1018 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1019:*:*:*:*:*:*:* Versions 4.1.249.1019 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1020:*:*:*:*:*:*:* Versions 4.1.249.1020 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1021:*:*:*:*:*:*:* Versions 4.1.249.1021 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1022:*:*:*:*:*:*:* Versions 4.1.249.1022 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1023:*:*:*:*:*:*:* Versions 4.1.249.1023 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1024:*:*:*:*:*:*:* Versions 4.1.249.1024 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1025:*:*:*:*:*:*:* Versions 4.1.249.1025 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1026:*:*:*:*:*:*:* Versions 4.1.249.1026 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1027:*:*:*:*:*:*:* Versions 4.1.249.1027 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1028:*:*:*:*:*:*:* Versions 4.1.249.1028 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1029:*:*:*:*:*:*:* Versions 4.1.249.1029 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1030:*:*:*:*:*:*:* Versions 4.1.249.1030 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1031:*:*:*:*:*:*:* Versions 4.1.249.1031 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1032:*:*:*:*:*:*:* Versions 4.1.249.1032 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1033:*:*:*:*:*:*:* Versions 4.1.249.1033 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1034:*:*:*:*:*:*:* Versions 4.1.249.1034 Vulnerable ·Google
- cpe:2.3:a:google:chrome:4.1.249.1035:*:*:*:*:*:*:* Versions 4.1.249.1035 Vulnerable ·Google
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2010-1237
- 2026-10-03 Alias added: GHSA-678h-g5gp-jp98
References
More Google Chrome vulnerabilities
- TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
- TI-2024-07390 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04898 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04600 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04346 Use after free in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2023-05824 Integer overflow in Google Chrome KEVCVSS 3.1CRITICAL 9.6
Sources
- CVE-2010-1237 · CVE Program
- CVE-2010-1237 · NVD
- FIRST EPSS
- GHSA-678h-g5gp-jp98 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences