What’s Vulnerable › Vulnerabilities

CVE-2010-4483

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-12-07 · updated 2026-06-16
• Weakness: CWE-264

Description

Google Chrome before 8.0.552.215 does not properly restrict read access to videos derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via a crafted web site.

Affected products

• Google Chrome: through 8.0.552.214

References

• http://code.google.com/p/chromium/issues/detail?id=55745
• http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates.html
• http://secunia.com/advisories/42472
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11610
• https://technet.microsoft.com/library/security/msvr11-002
• http://code.google.com/p/chromium/issues/detail?id=55745
• http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates.html
• http://secunia.com/advisories/42472
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11610
• https://technet.microsoft.com/library/security/msvr11-002

Get alerted when CVE-2010-4483 or the next vulnerability affects your stack