AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2010-0178

HIGH · CVSS 7.6 EPSS 3.43%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-04-05 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2010-0178
Severity
HIGH
CVSS
7.6
EPSS
3.43%
Chrome Firefox Java

Original NVD Description

Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by loading a chrome: URL and then loading a javascript: URL.