Read the docs
TI-2010-01606 Aliases CVE-2010-1663GHSA-7mcr-2fjm-xf66

The Google URL Parsing Library (aka google-url or GURL) in Google Chrome before…

Priority HIGH 75CWE-264Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

The Google URL Parsing Library (aka google-url or GURL) in Google Chrome before 4.1.249.1064 allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

Why it matters now

EPSS 0.54067 99th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 108

CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*up to 4.1.249.1063VulnerableGoogle
cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*0.2.149.27VulnerableGoogle
cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*0.2.149.29VulnerableGoogle
cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*0.2.149.30VulnerableGoogle
cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*0.2.152.1VulnerableGoogle
cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*0.2.153.1VulnerableGoogle
cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*0.3.154.0VulnerableGoogle
cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*0.3.154.3VulnerableGoogle
cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*0.4.154.18VulnerableGoogle
cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*0.4.154.22VulnerableGoogle
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions up to 4.1.249.1063 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:* Versions 0.2.149.27 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:* Versions 0.2.149.29 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:* Versions 0.2.149.30 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:* Versions 0.2.152.1 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:* Versions 0.2.153.1 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:* Versions 0.3.154.0 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:* Versions 0.3.154.3 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:* Versions 0.4.154.18 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:* Versions 0.4.154.22 Vulnerable ·Google
Show 98 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*0.4.154.31VulnerableGoogle
cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*0.4.154.33VulnerableGoogle
cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*1.0.154.36VulnerableGoogle
cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*1.0.154.39VulnerableGoogle
cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*1.0.154.42VulnerableGoogle
cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*1.0.154.43VulnerableGoogle
cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*1.0.154.46VulnerableGoogle
cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*1.0.154.48VulnerableGoogle
cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*1.0.154.52VulnerableGoogle
cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*1.0.154.53VulnerableGoogle
cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*1.0.154.59VulnerableGoogle
cpe:2.3:a:google:chrome:1.0.154.64:*:*:*:*:*:*:*1.0.154.64VulnerableGoogle
cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*1.0.154.65VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*2.0.156.1VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*2.0.157.0VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*2.0.157.2VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*2.0.158.0VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*2.0.159.0VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*2.0.169.0VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*2.0.169.1VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*2.0.170.0VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*2.0.172VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*2.0.172.2VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*2.0.172.8VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*2.0.172.27VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*2.0.172.28VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*2.0.172.30VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*2.0.172.31VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*2.0.172.33VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*2.0.172.37VulnerableGoogle
cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*2.0.172.38VulnerableGoogle
cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*3.0.182.2VulnerableGoogle
cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*3.0.190.2VulnerableGoogle
cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*3.0.193.2 betaVulnerableGoogle
cpe:2.3:a:google:chrome:3.0.195.2:*:*:*:*:*:*:*3.0.195.2VulnerableGoogle
cpe:2.3:a:google:chrome:3.0.195.21:*:*:*:*:*:*:*3.0.195.21VulnerableGoogle
cpe:2.3:a:google:chrome:3.0.195.24:*:*:*:*:*:*:*3.0.195.24VulnerableGoogle
cpe:2.3:a:google:chrome:3.0.195.25:*:*:*:*:*:*:*3.0.195.25VulnerableGoogle
cpe:2.3:a:google:chrome:3.0.195.27:*:*:*:*:*:*:*3.0.195.27VulnerableGoogle
cpe:2.3:a:google:chrome:3.0.195.32:*:*:*:*:*:*:*3.0.195.32VulnerableGoogle
cpe:2.3:a:google:chrome:3.0.195.33:*:*:*:*:*:*:*3.0.195.33VulnerableGoogle
cpe:2.3:a:google:chrome:3.0.195.36:*:*:*:*:*:*:*3.0.195.36VulnerableGoogle
cpe:2.3:a:google:chrome:3.0.195.37:*:*:*:*:*:*:*3.0.195.37VulnerableGoogle
cpe:2.3:a:google:chrome:3.0.195.38:*:*:*:*:*:*:*3.0.195.38VulnerableGoogle
cpe:2.3:a:google:chrome:4.1:beta:*:*:*:*:*:*4.1 betaVulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.0:*:*:*:*:*:*:*4.1.249.0VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1001:*:*:*:*:*:*:*4.1.249.1001VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1004:*:*:*:*:*:*:*4.1.249.1004VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1006:*:*:*:*:*:*:*4.1.249.1006VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1007:*:*:*:*:*:*:*4.1.249.1007VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1008:*:*:*:*:*:*:*4.1.249.1008VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1009:*:*:*:*:*:*:*4.1.249.1009VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1010:*:*:*:*:*:*:*4.1.249.1010VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1011:*:*:*:*:*:*:*4.1.249.1011VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1012:*:*:*:*:*:*:*4.1.249.1012VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1013:*:*:*:*:*:*:*4.1.249.1013VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1014:*:*:*:*:*:*:*4.1.249.1014VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1015:*:*:*:*:*:*:*4.1.249.1015VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1016:*:*:*:*:*:*:*4.1.249.1016VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1017:*:*:*:*:*:*:*4.1.249.1017VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1018:*:*:*:*:*:*:*4.1.249.1018VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1019:*:*:*:*:*:*:*4.1.249.1019VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1020:*:*:*:*:*:*:*4.1.249.1020VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1021:*:*:*:*:*:*:*4.1.249.1021VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1022:*:*:*:*:*:*:*4.1.249.1022VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1023:*:*:*:*:*:*:*4.1.249.1023VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1024:*:*:*:*:*:*:*4.1.249.1024VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1025:*:*:*:*:*:*:*4.1.249.1025VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1026:*:*:*:*:*:*:*4.1.249.1026VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1027:*:*:*:*:*:*:*4.1.249.1027VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1028:*:*:*:*:*:*:*4.1.249.1028VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1029:*:*:*:*:*:*:*4.1.249.1029VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1030:*:*:*:*:*:*:*4.1.249.1030VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1031:*:*:*:*:*:*:*4.1.249.1031VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1032:*:*:*:*:*:*:*4.1.249.1032VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1033:*:*:*:*:*:*:*4.1.249.1033VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1034:*:*:*:*:*:*:*4.1.249.1034VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1035:*:*:*:*:*:*:*4.1.249.1035VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1036:*:*:*:*:*:*:*4.1.249.1036VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1042:*:*:*:*:*:*:*4.1.249.1042VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1045:*:*:*:*:*:*:*4.1.249.1045VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1046:*:*:*:*:*:*:*4.1.249.1046VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1047:*:*:*:*:*:*:*4.1.249.1047VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1048:*:*:*:*:*:*:*4.1.249.1048VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1049:*:*:*:*:*:*:*4.1.249.1049VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1050:*:*:*:*:*:*:*4.1.249.1050VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1051:*:*:*:*:*:*:*4.1.249.1051VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1052:*:*:*:*:*:*:*4.1.249.1052VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1053:*:*:*:*:*:*:*4.1.249.1053VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1054:*:*:*:*:*:*:*4.1.249.1054VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1055:*:*:*:*:*:*:*4.1.249.1055VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1056:*:*:*:*:*:*:*4.1.249.1056VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1057:*:*:*:*:*:*:*4.1.249.1057VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1058:*:*:*:*:*:*:*4.1.249.1058VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1059:*:*:*:*:*:*:*4.1.249.1059VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1060:*:*:*:*:*:*:*4.1.249.1060VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1061:*:*:*:*:*:*:*4.1.249.1061VulnerableGoogle
cpe:2.3:a:google:chrome:4.1.249.1062:*:*:*:*:*:*:*4.1.249.1062VulnerableGoogle
  • cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:* Versions 0.4.154.31 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:* Versions 0.4.154.33 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:* Versions 1.0.154.36 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:* Versions 1.0.154.39 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:* Versions 1.0.154.42 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:* Versions 1.0.154.43 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:* Versions 1.0.154.46 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:* Versions 1.0.154.48 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:* Versions 1.0.154.52 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:* Versions 1.0.154.53 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:* Versions 1.0.154.59 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:1.0.154.64:*:*:*:*:*:*:* Versions 1.0.154.64 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:* Versions 1.0.154.65 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:* Versions 2.0.156.1 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:* Versions 2.0.157.0 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:* Versions 2.0.157.2 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:* Versions 2.0.158.0 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:* Versions 2.0.159.0 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:* Versions 2.0.169.0 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:* Versions 2.0.169.1 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:* Versions 2.0.170.0 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:* Versions 2.0.172 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:* Versions 2.0.172.2 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:* Versions 2.0.172.8 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:* Versions 2.0.172.27 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:* Versions 2.0.172.28 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:* Versions 2.0.172.30 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:* Versions 2.0.172.31 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:* Versions 2.0.172.33 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:* Versions 2.0.172.37 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:* Versions 2.0.172.38 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:* Versions 3.0.182.2 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:* Versions 3.0.190.2 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:* Versions 3.0.193.2 beta Vulnerable ·Google
  • cpe:2.3:a:google:chrome:3.0.195.2:*:*:*:*:*:*:* Versions 3.0.195.2 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:3.0.195.21:*:*:*:*:*:*:* Versions 3.0.195.21 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:3.0.195.24:*:*:*:*:*:*:* Versions 3.0.195.24 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:3.0.195.25:*:*:*:*:*:*:* Versions 3.0.195.25 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:3.0.195.27:*:*:*:*:*:*:* Versions 3.0.195.27 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:3.0.195.32:*:*:*:*:*:*:* Versions 3.0.195.32 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:3.0.195.33:*:*:*:*:*:*:* Versions 3.0.195.33 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:3.0.195.36:*:*:*:*:*:*:* Versions 3.0.195.36 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:3.0.195.37:*:*:*:*:*:*:* Versions 3.0.195.37 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:3.0.195.38:*:*:*:*:*:*:* Versions 3.0.195.38 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1:beta:*:*:*:*:*:* Versions 4.1 beta Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.0:*:*:*:*:*:*:* Versions 4.1.249.0 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1001:*:*:*:*:*:*:* Versions 4.1.249.1001 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1004:*:*:*:*:*:*:* Versions 4.1.249.1004 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1006:*:*:*:*:*:*:* Versions 4.1.249.1006 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1007:*:*:*:*:*:*:* Versions 4.1.249.1007 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1008:*:*:*:*:*:*:* Versions 4.1.249.1008 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1009:*:*:*:*:*:*:* Versions 4.1.249.1009 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1010:*:*:*:*:*:*:* Versions 4.1.249.1010 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1011:*:*:*:*:*:*:* Versions 4.1.249.1011 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1012:*:*:*:*:*:*:* Versions 4.1.249.1012 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1013:*:*:*:*:*:*:* Versions 4.1.249.1013 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1014:*:*:*:*:*:*:* Versions 4.1.249.1014 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1015:*:*:*:*:*:*:* Versions 4.1.249.1015 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1016:*:*:*:*:*:*:* Versions 4.1.249.1016 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1017:*:*:*:*:*:*:* Versions 4.1.249.1017 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1018:*:*:*:*:*:*:* Versions 4.1.249.1018 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1019:*:*:*:*:*:*:* Versions 4.1.249.1019 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1020:*:*:*:*:*:*:* Versions 4.1.249.1020 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1021:*:*:*:*:*:*:* Versions 4.1.249.1021 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1022:*:*:*:*:*:*:* Versions 4.1.249.1022 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1023:*:*:*:*:*:*:* Versions 4.1.249.1023 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1024:*:*:*:*:*:*:* Versions 4.1.249.1024 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1025:*:*:*:*:*:*:* Versions 4.1.249.1025 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1026:*:*:*:*:*:*:* Versions 4.1.249.1026 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1027:*:*:*:*:*:*:* Versions 4.1.249.1027 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1028:*:*:*:*:*:*:* Versions 4.1.249.1028 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1029:*:*:*:*:*:*:* Versions 4.1.249.1029 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1030:*:*:*:*:*:*:* Versions 4.1.249.1030 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1031:*:*:*:*:*:*:* Versions 4.1.249.1031 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1032:*:*:*:*:*:*:* Versions 4.1.249.1032 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1033:*:*:*:*:*:*:* Versions 4.1.249.1033 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1034:*:*:*:*:*:*:* Versions 4.1.249.1034 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1035:*:*:*:*:*:*:* Versions 4.1.249.1035 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1036:*:*:*:*:*:*:* Versions 4.1.249.1036 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1042:*:*:*:*:*:*:* Versions 4.1.249.1042 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1045:*:*:*:*:*:*:* Versions 4.1.249.1045 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1046:*:*:*:*:*:*:* Versions 4.1.249.1046 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1047:*:*:*:*:*:*:* Versions 4.1.249.1047 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1048:*:*:*:*:*:*:* Versions 4.1.249.1048 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1049:*:*:*:*:*:*:* Versions 4.1.249.1049 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1050:*:*:*:*:*:*:* Versions 4.1.249.1050 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1051:*:*:*:*:*:*:* Versions 4.1.249.1051 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1052:*:*:*:*:*:*:* Versions 4.1.249.1052 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1053:*:*:*:*:*:*:* Versions 4.1.249.1053 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1054:*:*:*:*:*:*:* Versions 4.1.249.1054 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1055:*:*:*:*:*:*:* Versions 4.1.249.1055 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1056:*:*:*:*:*:*:* Versions 4.1.249.1056 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1057:*:*:*:*:*:*:* Versions 4.1.249.1057 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1058:*:*:*:*:*:*:* Versions 4.1.249.1058 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1059:*:*:*:*:*:*:* Versions 4.1.249.1059 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1060:*:*:*:*:*:*:* Versions 4.1.249.1060 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1061:*:*:*:*:*:*:* Versions 4.1.249.1061 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:4.1.249.1062:*:*:*:*:*:*:* Versions 4.1.249.1062 Vulnerable ·Google

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-1663
  2. 2026-10-03 Alias added: GHSA-7mcr-2fjm-xf66
  3. 2026-10-20 EPSS moved to the 99th percentile and above
  4. 2026-10-25 EPSS moved to the 95th–99th percentile
  5. 2026-10-27 EPSS moved to the 99th percentile and above

References

Exploit 1

Advisory 1

Other 2

  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-07390 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04898 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04600 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04346 Use after free in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2023-05824 Integer overflow in Google Chrome KEVCVSS 3.1CRITICAL 9.6
See all 7586 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences