CVE-2009-3933: WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial...

Security readout for executives and security teams

CVE-2009-3933 is an old WebKit/Google Chrome issue where a crafted web page could make the browser consume excessive CPU, causing a denial of service. It is not described as code execution or data theft. Business urgency is mainly for environments still running very old Chrome or WebKit-based components. Exposure is most likely limited to legacy systems using Chrome before 3.0.195.32 or WebKit builds before r50173. Modern managed browsers are unlikely to be affected, but embedded WebKit, kiosks, old Linux packages, or unsupported appliances should be checked. Treat as a legacy cleanup item unless old WebKit or Chrome is still present. It does not indicate data compromise, but outdated browsers create broader unmanaged risk beyond this denial-of-service issue. Mitigation focus: Upgrade Google Chrome to a version newer than 3.0.195.32.; Use WebKit builds that include revision r50173 or later.; Identify downstream products embedding old WebKit and check vendor guidance..

Prepared

Jun 28, 2026, 18:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.