CVE-2010-0315

Status: ModifiedMedium (5)—Exploit
Severity5Medium · CVSS 2.0
Exploitation probability6.89 %higher than 94% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitAvailablePublished on Exploit-DB
WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value, related to an IFRAME element.
CVSS

Base score: 5
Version: 2.0
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 6.89 %
Percentile among all scored CVEs: 94
Score date: 10/21/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Public exploits

Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.
Published on Exploit-DB · Google Chrome 3.0 - Style Sheet redirection Information Disclosure (1/22/2010)
Affected technologies (1)

Google — Chrome
CWEs

NVD-CWE-Other
References

Show 32 references
Raw JSON (NVD)

Show
{
  "id": "CVE-2010-0315",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-01-14T19:30:00.703",
  "references": [
    {
      "url": "http://code.google.com/p/chromium/issues/detail?id=32309",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/38545",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/43068",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1023583",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://trac.webkit.org/changeset/53607",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/38177",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/0361",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/0212",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://bugs.webkit.org/show_bug.cgi?id=33683",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55683",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56215",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14452",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://code.google.com/p/chromium/issues/detail?id=32309",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/38545",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/43068",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1023583",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://trac.webkit.org/changeset/53607",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/38177",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/0361",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/0212",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.webkit.org/show_bug.cgi?id=33683",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55683",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56215",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14452",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value, related to an IFRAME element."
    },
    {
      "lang": "es",
      "value": "WebKit anterior a versión r53607, tal como es usado en Chrome de Google anterior a versión 4.0.249.89, permite a los atacantes remotos detectar la URL de destino de redireccionamiento, para la sesión de un usuario específico de un sitio web, mediante la colocación de la URL del sitio en el atributo HREF de un elemento LINK de hoja de estilos y, a continuación, leer el valor de la propiedad document.styleSheets[0].href, relacionado con un elemento IFRAME."
    }
  ],
  "lastModified": "2026-06-16T23:15:55.233",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DB06F2D1-06F9-45B3-A390-EB25C2364F2C",
              "versionEndIncluding": "4.0.249.78"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D55D5075-D233-42D6-B1D6-77B7599650EB"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B8FF77A-7802-4963-B532-3F16C7BB012C"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D73576CF-76EE-42A3-9955-D7991384B8C1"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "66A4FEB5-11D8-4FFC-972D-A3B991176040"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A6313614-FC3C-488C-B80B-191797319A56"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0D94F22-37B6-4938-966A-E1830D83FBC3"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C0F9D75-B10D-468F-84D8-61B6A1230556"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "173D539E-045E-4429-80C9-5749BECC6CD5"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D2052352-FECC-4990-B0F4-A715694AD816"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6659833E-E309-4797-84D4-A782237714A9"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FE4C0D93-0308-48D4-A953-9398B88E2868"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FE5094C4-1338-4189-B5FD-C9AFFF091D6B"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "67C0798F-CC7F-4069-810E-B81F8BB77CCD"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A2F95770-F36F-43C0-986F-5C819648271E"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECCE1FD3-8D27-4304-97F9-6F9689F2498D"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0F6CA696-49AA-4445-B978-96C1D8CE58DF"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9CFA3BF-6C07-448B-8C83-AD4C524A6577"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E8497F93-D88A-4FFA-B988-7210608530A8"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "49FB50A3-FFDA-4BB9-A2C1-DA6DACC2DAAB"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "59F93BC8-FE87-4CEC-B28A-4B0B5A468EDE"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "02D459C7-2555-42FA-9C68-619E410D7CBA"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5CDF938-2998-403F-B343-29B620E05D44"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "64F89EA6-B411-4887-90A1-FF3A054424F6"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "10D2BA3B-1C69-470C-9C40-001FAE82DDB4"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3583995C-CD74-401F-905D-65B73CFC4595"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0A621B1-3186-4CE2-8BCC-916027CC74CF"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F5223F1-85CD-4DF9-9665-BDF7B554A784"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8DD7AFBA-A9A2-4EE9-B652-78D25EFBB690"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B9D6ED9-D5C5-4CA9-84EA-8007F48CF597"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E7F7897-ECD1-499E-81CD-E224241B6607"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C7422307-271F-4953-9CA4-C50238D27BAE"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9DCC3490-5B06-4992-8E31-CA46E18607B7"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C2F85551-EDB5-4790-8095-EFFA7DEC7F98"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:3.0.195.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6FEBB1A8-295B-4AF7-996D-F7E415B91ECB"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:3.0.195.24:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50995718-0F70-44CA-863B-4AFB4C7AF3CD"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:3.0.195.32:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31D2B04D-ECEB-4B9B-9DC7-FE17C13DD72A"
            },
            {
              "criteria": "cpe:2.3:a:google:chrome:3.0.195.33:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F7460B03-A658-4507-8D9E-E0234940BD71"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}