CVE-2010-3114: Canonical Ubuntu Linux

High severity, CVSS 10.0. EPSS: 1.8% chance of exploitation in the next 30 days.

The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to (1) DeleteSelectionCommand.cpp, (2) InsertLineBreakCommand.cpp, or (3) InsertParagraphSeparatorCommand.cpp in WebCore/editing/.

Affected products

• Canonical Ubuntu Linux: version 9.10 only; version 10.04 only; version 10.10 only
• Google Chrome: before 5.0.375.127 (fixed in 5.0.375.127)
• WebKitGTK WebKitGTK: before 1.2.6 (fixed in 1.2.6)

Published 2010-08-24. Last modified 2026-06-16.