AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2010-4577

HIGH · CVSS 7.5 EPSS 2.21%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-12-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2010-4577
Severity
HIGH
CVSS
7.5
EPSS
2.21%
Chrome

Original NVD Description

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."