The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to (1) DeleteSelectionCommand.cpp, (2) InsertLineBreakCommand.cpp, or (3) InsertParagraphSeparatorCommand.cpp in WebCore/editing/.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade webkit-gtk2 | Dec 10, 2025 | Oct 19, 2010 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Mar 21, 2012 | Aug 24, 2010 |
| Oracle_linux | — | Upgrade webkitgtkUpgrade webkitgtk-docUpgrade webkitgtk-devel | Oct 16, 2024 | Aug 24, 2010 |
| Ubuntu | — | Upgrade webkitUpgrade chromium-browser | Nov 19, 2024 | Aug 24, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub