CVE-2010-4576: Google Chrome

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

browser/worker_host/message_port_dispatcher.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 does not properly handle certain postMessage calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code that creates a web worker.

Affected products

• Google Chrome: before 8.0.552.224 (fixed in 8.0.552.224)
• Google Chrome OS: before 8.0.552.343 (fixed in 8.0.552.343)

Published 2010-12-22. Last modified 2026-06-16.