Read the docs
TI-2010-01192 Aliases CVE-2010-1237GHSA-678h-g5gp-jp98

Google Chrome 4.1 BETA before 4.1.249.1036 allows remote attackers to cause a denial of…

Priority LOW 35CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Google Chrome 4.1 BETA before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via an empty SVG element.

Why it matters now

EPSS 0.0105 64th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 33

CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:4.1.249.0:*:*:*:*:*:*:*4.1.249.0VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1001:*:*:*:*:*:*:*4.1.249.1001VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1004:*:*:*:*:*:*:*4.1.249.1004VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1006:*:*:*:*:*:*:*4.1.249.1006VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1007:*:*:*:*:*:*:*4.1.249.1007VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1008:*:*:*:*:*:*:*4.1.249.1008VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1009:*:*:*:*:*:*:*4.1.249.1009VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1010:*:*:*:*:*:*:*4.1.249.1010VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1011:*:*:*:*:*:*:*4.1.249.1011VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1012:*:*:*:*:*:*:*4.1.249.1012VulnerableGoogle
  • cpe:2.3:a:google:chrome:4.1.249.0:*:*:*:*:*:*:* Versions 4.1.249.0 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1001:*:*:*:*:*:*:* Versions 4.1.249.1001 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1004:*:*:*:*:*:*:* Versions 4.1.249.1004 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1006:*:*:*:*:*:*:* Versions 4.1.249.1006 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1007:*:*:*:*:*:*:* Versions 4.1.249.1007 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1008:*:*:*:*:*:*:* Versions 4.1.249.1008 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1009:*:*:*:*:*:*:* Versions 4.1.249.1009 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1010:*:*:*:*:*:*:* Versions 4.1.249.1010 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1011:*:*:*:*:*:*:* Versions 4.1.249.1011 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1012:*:*:*:*:*:*:* Versions 4.1.249.1012 Vulnerable ·Google
Show 23 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:4.1.249.1013:*:*:*:*:*:*:*4.1.249.1013VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1014:*:*:*:*:*:*:*4.1.249.1014VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1015:*:*:*:*:*:*:*4.1.249.1015VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1016:*:*:*:*:*:*:*4.1.249.1016VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1017:*:*:*:*:*:*:*4.1.249.1017VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1018:*:*:*:*:*:*:*4.1.249.1018VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1019:*:*:*:*:*:*:*4.1.249.1019VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1020:*:*:*:*:*:*:*4.1.249.1020VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1021:*:*:*:*:*:*:*4.1.249.1021VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1022:*:*:*:*:*:*:*4.1.249.1022VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1023:*:*:*:*:*:*:*4.1.249.1023VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1024:*:*:*:*:*:*:*4.1.249.1024VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1025:*:*:*:*:*:*:*4.1.249.1025VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1026:*:*:*:*:*:*:*4.1.249.1026VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1027:*:*:*:*:*:*:*4.1.249.1027VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1028:*:*:*:*:*:*:*4.1.249.1028VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1029:*:*:*:*:*:*:*4.1.249.1029VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1030:*:*:*:*:*:*:*4.1.249.1030VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1031:*:*:*:*:*:*:*4.1.249.1031VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1032:*:*:*:*:*:*:*4.1.249.1032VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1033:*:*:*:*:*:*:*4.1.249.1033VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1034:*:*:*:*:*:*:*4.1.249.1034VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1035:*:*:*:*:*:*:*4.1.249.1035VulnerableGoogle
  • cpe:2.3:a:google:chrome:4.1.249.1013:*:*:*:*:*:*:* Versions 4.1.249.1013 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1014:*:*:*:*:*:*:* Versions 4.1.249.1014 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1015:*:*:*:*:*:*:* Versions 4.1.249.1015 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1016:*:*:*:*:*:*:* Versions 4.1.249.1016 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1017:*:*:*:*:*:*:* Versions 4.1.249.1017 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1018:*:*:*:*:*:*:* Versions 4.1.249.1018 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1019:*:*:*:*:*:*:* Versions 4.1.249.1019 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1020:*:*:*:*:*:*:* Versions 4.1.249.1020 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1021:*:*:*:*:*:*:* Versions 4.1.249.1021 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1022:*:*:*:*:*:*:* Versions 4.1.249.1022 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1023:*:*:*:*:*:*:* Versions 4.1.249.1023 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1024:*:*:*:*:*:*:* Versions 4.1.249.1024 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1025:*:*:*:*:*:*:* Versions 4.1.249.1025 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1026:*:*:*:*:*:*:* Versions 4.1.249.1026 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1027:*:*:*:*:*:*:* Versions 4.1.249.1027 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1028:*:*:*:*:*:*:* Versions 4.1.249.1028 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1029:*:*:*:*:*:*:* Versions 4.1.249.1029 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1030:*:*:*:*:*:*:* Versions 4.1.249.1030 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1031:*:*:*:*:*:*:* Versions 4.1.249.1031 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1032:*:*:*:*:*:*:* Versions 4.1.249.1032 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1033:*:*:*:*:*:*:* Versions 4.1.249.1033 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1034:*:*:*:*:*:*:* Versions 4.1.249.1034 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1035:*:*:*:*:*:*:* Versions 4.1.249.1035 Vulnerable ·Google

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-1237
  2. 2026-10-03 Alias added: GHSA-678h-g5gp-jp98

References

  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-07390 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04898 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04600 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04346 Use after free in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2023-05824 Integer overflow in Google Chrome KEVCVSS 3.1CRITICAL 9.6
See all 7586 →

Sources