CVE-2010-4254: Mono

High severity, CVSS 7.5. EPSS: 13.6% chance of exploitation in the next 30 days.

Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call.

Affected products

• Mono Mono: any version
• Novell Moonlight: up to and including 2.3.0; version 2.99.0 only; version 2.99.1 only; version 2.99.2 only; version 2.99.7 only; version 2.99.9 only

Published 2010-12-06. Last modified 2026-06-16.