CVE-2010-3250
Status: ModifiedMedium (5)—
Severity5Medium · CVSS 2.0
Exploitation probability0.89 %higher than 59% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitNot knownno public code found
Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed extensions via unknown vectors.
CVSS
- Base score
- 5
- Version
- 2.0
- Vector
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 0.89 %
- Percentile among all scored CVEs
- 59
- Score date
- 10/23/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- NVD-CWE-noinfo
References
Show 6 references
- http://code.google.com/p/chromium/issues/detail?id=45876
- http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12106
- http://code.google.com/p/chromium/issues/detail?id=45876
- http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12106
Raw JSON (NVD)
Show
{
"id": "CVE-2010-3250",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": true,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-09-07T18:00:02.637",
"references": [
{
"url": "http://code.google.com/p/chromium/issues/detail?id=45876",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12106",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://code.google.com/p/chromium/issues/detail?id=45876",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12106",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed extensions via unknown vectors."
},
{
"lang": "es",
"value": "Vulnerabilidad sin especificar en Google Chrome anterior a v6.0.472.53 permite a atacantes remotos enumerar el conjunto de extensiones instaladas a través de vectores desconocidos."
}
],
"lastModified": "2026-06-16T23:22:26.843",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B85C57A0-7C7A-484E-902A-6FBF654EB1D6",
"versionEndExcluding": "6.0.472.53"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}