CVE-2010-0660
Status: ModifiedMedium (5)—
Severity5Medium · CVSS 2.0
Exploitation probability0.76 %higher than 55% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitNot knownno public code found
Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging.
CVSS
- Base score
- 5
- Version
- 2.0
- Vector
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 0.76 %
- Percentile among all scored CVEs
- 55
- Score date
- 10/23/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-200
References
Show 10 references
- http://code.google.com/p/chromium/issues/detail?id=29920
- http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html
- http://securitytracker.com/id?1023506
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14247
- http://code.google.com/p/chromium/issues/detail?id=29920
- http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html
- http://securitytracker.com/id?1023506
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14247
Raw JSON (NVD)
Show
{
"id": "CVE-2010-0660",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-02-18T18:00:00.987",
"references": [
{
"url": "http://code.google.com/p/chromium/issues/detail?id=29920",
"source": "cve@mitre.org"
},
{
"url": "http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1023506",
"source": "cve@mitre.org"
},
{
"url": "http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14247",
"source": "cve@mitre.org"
},
{
"url": "http://code.google.com/p/chromium/issues/detail?id=29920",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1023506",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14247",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging."
},
{
"lang": "es",
"value": "Google Chrome anterior a v4.0.249.78 envía una dirección URL https en la cabecera Referer de una petición HTTP en determinadas circunstancias involucrando la redirección https a http, lo cual permite a los servidores HTTP remotos obtener información sensible a través de registro HTTP estándar (logs)."
}
],
"lastModified": "2026-06-16T23:16:36.130",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74697DF5-4F60-40DA-AADE-44288F4AAC18",
"versionEndIncluding": "4.0.249.0"
},
{
"criteria": "cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D55D5075-D233-42D6-B1D6-77B7599650EB"
},
{
"criteria": "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B8FF77A-7802-4963-B532-3F16C7BB012C"
},
{
"criteria": "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D73576CF-76EE-42A3-9955-D7991384B8C1"
},
{
"criteria": "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD4A2AB1-6F90-4D0B-A673-C6310514CE63"
},
{
"criteria": "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66A4FEB5-11D8-4FFC-972D-A3B991176040"
},
{
"criteria": "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6313614-FC3C-488C-B80B-191797319A56"
},
{
"criteria": "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9CDF3DAB-73C4-48E8-9B0B-DADABF217555"
},
{
"criteria": "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B2FAE50-4CA3-46F6-B533-C599011A9ED5"
},
{
"criteria": "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0D94F22-37B6-4938-966A-E1830D83FBC3"
},
{
"criteria": "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8B7164E-7A4F-4959-9E6D-EF614EDD4C3C"
},
{
"criteria": "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C0F9D75-B10D-468F-84D8-61B6A1230556"
},
{
"criteria": "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D2CAE29-3F1E-4374-B82C-B60B7BB4AEAE"
},
{
"criteria": "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "173D539E-045E-4429-80C9-5749BECC6CD5"
},
{
"criteria": "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2052352-FECC-4990-B0F4-A715694AD816"
},
{
"criteria": "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCBC80CB-4AB8-4EDF-9940-D2D7124D7549"
},
{
"criteria": "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E37938BB-8368-46D6-A8E4-F99F5CB9B82E"
},
{
"criteria": "cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6659833E-E309-4797-84D4-A782237714A9"
},
{
"criteria": "cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE4C0D93-0308-48D4-A953-9398B88E2868"
},
{
"criteria": "cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE5094C4-1338-4189-B5FD-C9AFFF091D6B"
},
{
"criteria": "cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51A8C3D2-82E6-453E-90B7-BA5C5D2CDF54"
},
{
"criteria": "cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67C0798F-CC7F-4069-810E-B81F8BB77CCD"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2F95770-F36F-43C0-986F-5C819648271E"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECCE1FD3-8D27-4304-97F9-6F9689F2498D"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F6CA696-49AA-4445-B978-96C1D8CE58DF"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9CFA3BF-6C07-448B-8C83-AD4C524A6577"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E8497F93-D88A-4FFA-B988-7210608530A8"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49FB50A3-FFDA-4BB9-A2C1-DA6DACC2DAAB"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59F93BC8-FE87-4CEC-B28A-4B0B5A468EDE"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02D459C7-2555-42FA-9C68-619E410D7CBA"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5CDF938-2998-403F-B343-29B620E05D44"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64F89EA6-B411-4887-90A1-FF3A054424F6"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10D2BA3B-1C69-470C-9C40-001FAE82DDB4"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3583995C-CD74-401F-905D-65B73CFC4595"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0A621B1-3186-4CE2-8BCC-916027CC74CF"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4A9B50D-5B0F-41C9-8FAF-B78CD21A0554"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F5223F1-85CD-4DF9-9665-BDF7B554A784"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8DD7AFBA-A9A2-4EE9-B652-78D25EFBB690"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B9D6ED9-D5C5-4CA9-84EA-8007F48CF597"
},
{
"criteria": "cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E7F7897-ECD1-499E-81CD-E224241B6607"
},
{
"criteria": "cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7422307-271F-4953-9CA4-C50238D27BAE"
},
{
"criteria": "cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DCC3490-5B06-4992-8E31-CA46E18607B7"
},
{
"criteria": "cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2F85551-EDB5-4790-8095-EFFA7DEC7F98"
},
{
"criteria": "cpe:2.3:a:google:chrome:3.0.195.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FEBB1A8-295B-4AF7-996D-F7E415B91ECB"
},
{
"criteria": "cpe:2.3:a:google:chrome:3.0.195.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50995718-0F70-44CA-863B-4AFB4C7AF3CD"
},
{
"criteria": "cpe:2.3:a:google:chrome:3.0.195.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31D2B04D-ECEB-4B9B-9DC7-FE17C13DD72A"
},
{
"criteria": "cpe:2.3:a:google:chrome:3.0.195.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7460B03-A658-4507-8D9E-E0234940BD71"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}