CVE-2010-3917: Google Chrome

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Google Chrome before 3.0 does not properly handle XML documents, which allows remote attackers to obtain sensitive information via a crafted web site.

Affected products

• Google Chrome: before 3.0 (fixed in 3.0)

Published 2020-02-06. Last modified 2026-06-16.