What’s Vulnerable › Vulnerabilities
CVE-2010-4039
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2010-10-21 · updated 2026-06-16
Description
Google Chrome before 7.0.517.41 on Linux does not properly set the PATH environment variable, which has unspecified impact and attack vectors.
Affected products
- Google Chrome: before 7.0.517.41 — fixed in 7.0.517.41
How to fix
Upgrade to a fixed version: Google Chrome 7.0.517.41. Check the vendor advisory for mitigations.
References
- http://code.google.com/p/chromium/issues/detail?id=54132
- http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html
- http://secunia.com/advisories/41888
- http://www.securityfocus.com/bid/44241
- http://www.vupen.com/english/advisories/2010/2731
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14223
- http://code.google.com/p/chromium/issues/detail?id=54132
- http://googlechromereleases.blogspot.com/2010/10/stable-channel-update.html
- http://secunia.com/advisories/41888
- http://www.securityfocus.com/bid/44241
- http://www.vupen.com/english/advisories/2010/2731
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14223
Get alerted when CVE-2010-4039 or the next vulnerability affects your stack