VULNERABILITY INTELLIGENCE
CVE-2010-0657
CVSS score9.3 HIGH
EPSS probability1.88%
CISA KEVNot currently listed
Published2010-02-18
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Google Chrome before 4.0.249.78 on Windows does not perform the expected encoding, escaping, and quoting for the URL in the --app argument in a desktop shortcut, which allows user-assisted remote attackers to execute arbitrary programs or obtain sensitive information by tricking a user into creating a crafted shortcut.