CVE-2010-1851: Google Chrome

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Google Chrome, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site data leakage" issue.

Affected products

• Google Chrome: version 0.1.38.1 only; version 0.1.38.2 only; version 0.1.38.4 only; version 0.1.40.1 only; version 0.1.42.2 only; version 0.1.42.3 only; …

Published 2010-05-07. Last modified 2026-06-16.