CVE-2010-0650: Apple Safari

Low severity, CVSS 2.6. EPSS: 2.5% chance of exploitation in the next 30 days.

WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event.

Affected products

• Apple Safari: affected versions not specified
• Canonical Ubuntu Linux: version 9.10 only; version 10.04 only; version 10.10 only
• Google Chrome: before 4.0.249.78 (fixed in 4.0.249.78)

Published 2010-02-18. Last modified 2026-06-16.