CVE-2010-1230

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-04-01 · updated 2026-06-16
Weakness: CWE-200

Description

Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors.

Affected products

Google Chrome: before 4.1.249.1036 — fixed in 4.1.249.1036

How to fix

Upgrade to a fixed version: Google Chrome 4.1.249.1036. Check the vendor advisory for mitigations.

References

http://code.google.com/p/chromium/issues/detail?id=30801
http://code.google.com/p/chromium/issues/detail?id=33445
http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14292
http://code.google.com/p/chromium/issues/detail?id=30801
http://code.google.com/p/chromium/issues/detail?id=33445
http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14292

Get alerted when CVE-2010-1230 or the next vulnerability affects your stack