CVE-2010-0315: Google Chrome

Medium severity, CVSS 5.0. EPSS: 6.9% chance of exploitation in the next 30 days.

WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value, related to an IFRAME element.

Affected products

• Google Chrome: up to and including 4.0.249.78; version 0.2.149.27 only; version 0.2.149.29 only; version 0.2.149.30 only; version 0.2.152.1 only; version 0.2.153.1 only; …

Published 2010-01-14. Last modified 2026-06-16.