{"api_version":"1","generated_at":"2026-07-23T07:46:25+00:00","cve":"CVE-2010-4483","urls":{"html":"https://cve.report/CVE-2010-4483","api":"https://cve.report/api/cve/CVE-2010-4483.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-4483","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-4483"},"summary":{"title":"CVE-2010-4483","description":"Google Chrome before 8.0.552.215 does not properly restrict read access to videos derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via a crafted web site.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-12-07 21:00:08","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"https://technet.microsoft.com/library/security/msvr11-002","name":"https://technet.microsoft.com/library/security/msvr11-002","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Microsoft Vulnerability Research Advisory MSVR11-002 | Microsoft Docs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11610","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11610","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/42472","name":"http://secunia.com/advisories/42472","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Google Chrome Multiple Vulnerabilities - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://code.google.com/p/chromium/issues/detail?id=55745","name":"http://code.google.com/p/chromium/issues/detail?id=55745","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"55745 - \n \n \n chromium -\n \n \n An open-source project to help move the web forward. - \n \n Monorail","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates.html","name":"http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Google Chrome Releases: Stable, Beta Channel Updates","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4483","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4483","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"4483","vulnerable":"1","versionEndIncluding":"8.0.552.214","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"google","cpe5":"chrome","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T03:51:16.917Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://technet.microsoft.com/library/security/msvr11-002"},{"name":"42472","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42472"},{"name":"oval:org.mitre.oval:def:11610","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11610"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://code.google.com/p/chromium/issues/detail?id=55745"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-12-02T00:00:00.000Z","descriptions":[{"lang":"en","value":"Google Chrome before 8.0.552.215 does not properly restrict read access to videos derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via a crafted web site."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-18T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"https://technet.microsoft.com/library/security/msvr11-002"},{"name":"42472","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42472"},{"name":"oval:org.mitre.oval:def:11610","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11610"},{"tags":["x_refsource_CONFIRM"],"url":"http://code.google.com/p/chromium/issues/detail?id=55745"},{"tags":["x_refsource_CONFIRM"],"url":"http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-4483","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Google Chrome before 8.0.552.215 does not properly restrict read access to videos derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via a crafted web site."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://technet.microsoft.com/library/security/msvr11-002","refsource":"MISC","url":"https://technet.microsoft.com/library/security/msvr11-002"},{"name":"42472","refsource":"SECUNIA","url":"http://secunia.com/advisories/42472"},{"name":"oval:org.mitre.oval:def:11610","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11610"},{"name":"http://code.google.com/p/chromium/issues/detail?id=55745","refsource":"CONFIRM","url":"http://code.google.com/p/chromium/issues/detail?id=55745"},{"name":"http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates.html","refsource":"CONFIRM","url":"http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-4483","datePublished":"2010-12-07T20:00:00.000Z","dateReserved":"2010-12-07T00:00:00.000Z","dateUpdated":"2024-08-07T03:51:16.917Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-12-07 21:00:08","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.552.214","matchCriteriaId":"1A2F99C7-6964-47B0-9F25-C98788A3254B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"4483","Ordinal":"1","Title":"CVE-2010-4483","CVE":"CVE-2010-4483","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"4483","Ordinal":"1","NoteData":"Google Chrome before 8.0.552.215 does not properly restrict read access to videos derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via a crafted web site.","Type":"Description","Title":"CVE-2010-4483"},{"CveYear":"2010","CveId":"4483","Ordinal":"2","NoteData":"2010-12-07","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"4483","Ordinal":"3","NoteData":"2017-09-18","Type":"Other","Title":"Modified"}]}}}