CVEvulnerability
CVE-2010-1851
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-05-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Google Chrome, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site data leakage" issue.
Affected configurations
• google chrome 0.1.38.1
• google chrome 0.1.38.2
• google chrome 0.1.38.4
• google chrome 0.1.40.1
• google chrome 0.1.42.2
• google chrome 0.1.42.3
• google chrome 1.0.154.53
• google chrome 1.0.154.59
• google chrome 1.0.154.64
• google chrome 1.0.154.65
• google chrome 2.0.169.0
• google chrome 2.0.169.1
• google chrome 2.0.170.0
• google chrome 2.0.172.2
• google chrome 2.0.172.8
• google chrome 2.0.172.27
• google chrome 2.0.172.28
• google chrome 2.0.172.30
• google chrome 2.0.172.33
• google chrome 2.0.172.37
• google chrome 2.0.172.38
• google chrome 3.0.182.2
• google chrome 3.0.190.2
• google chrome 3.0.195.25
• google chrome 3.0.195.27
• google chrome 3.0.195.33
• google chrome 3.0.195.36
• google chrome 3.0.195.37
• google chrome 3.0.195.38
• google chrome 4.0.212.0
• google chrome 4.0.212.1
• google chrome 4.0.221.8
• google chrome 4.0.222.0
• google chrome 4.0.222.1
• google chrome 4.0.222.5
• google chrome 4.0.222.12
• google chrome 4.0.223.0
• google chrome 4.0.223.1
• google chrome 4.0.223.2
• google chrome 4.0.223.4
• google chrome 4.0.223.5
• google chrome 4.0.223.7
• google chrome 4.0.223.8
• google chrome 4.0.223.9
• google chrome 4.0.224.0
• google chrome 4.0.229.1
• google chrome 4.0.235.0
• google chrome 4.0.236.0
• google chrome 4.0.237.0
• google chrome 4.0.237.1
• google chrome 4.0.239.0
• google chrome 4.0.240.0
• google chrome 4.0.241.0
• google chrome 4.0.242.0
• google chrome 4.0.243.0
• google chrome 4.0.244.0
• google chrome 4.0.245.0
• google chrome 4.0.245.1
• google chrome 4.0.246.0
• google chrome 4.0.247.0
… and 192 more
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.cnet.com/8301-31361_1-20004265-254.html www.cnet.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11757 oval.cisecurity.org
- http://www.cnet.com/8301-31361_1-20004265-254.html www.cnet.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11757 oval.cisecurity.org