CVE-2010-0660: Google Chrome

Medium severity, CVSS 5.0. EPSS: 0.8% chance of exploitation in the next 30 days.

Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging.

Affected products

• Google Chrome: up to and including 4.0.249.0; version 0.2.149.27 only; version 0.2.149.29 only; version 0.2.149.30 only; version 0.2.152.1 only; version 0.2.153.1 only; …

Published 2010-02-18. Last modified 2026-06-16.