CVE-2010-2295: Google Chrome

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

page/EventHandler.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 does not properly handle a change of the focused frame during the dispatching of keydown, which allows user-assisted remote attackers to redirect keystrokes via a crafted HTML document, aka rdar problem 7018610. NOTE: this might overlap CVE-2010-1422.

Affected products

• Google Chrome: before 5.0.375.70 (fixed in 5.0.375.70)

Published 2010-06-15. Last modified 2026-06-16.