AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2010-2762

MEDIUM · CVSS 6.8 EPSS 2.02%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-09-09 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.8. It affects Chrome, Firefox, Java. It may be remotely exploitable.

CVE
CVE-2010-2762
Severity
MEDIUM
CVSS
6.8
EPSS
2.02%
Chrome Firefox Java

Original NVD Description

The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox 3.6.x before 3.6.9 and Thunderbird 3.1.x before 3.1.3 does not properly restrict objects at the end of scope chains, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via vectors related to a chrome privileged object and a chain ending in an outer object.