CVE-2010-4041: Google Chrome

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.

Affected products

• Google Chrome: before 7.0.517.41 (fixed in 7.0.517.41)

Published 2010-10-21. Last modified 2026-06-16.