AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2010-3259

MEDIUM · CVSS 4.3 EPSS 1.60%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-09-07 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.3. It affects Chrome. It may be remotely exploitable.

CVE
CVE-2010-3259
Severity
MEDIUM
CVSS
4.3
EPSS
1.60%
Chrome

Original NVD Description

WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read access to images derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive image data via a crafted web site.