CVE-2010-1851

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-05-07 · updated 2026-06-16
Weakness: CWE-200

Description

Google Chrome, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site data leakage" issue.

Affected products

Google Chrome: 0.1.38.1, 0.1.38.2, 0.1.38.4, 0.1.40.1, 0.1.42.2, 0.1.42.3 (+246)

References

http://www.cnet.com/8301-31361_1-20004265-254.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11757
http://www.cnet.com/8301-31361_1-20004265-254.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11757

Get alerted when CVE-2010-1851 or the next vulnerability affects your stack