CVE-2010-0651: WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5, permits cro...

Security readout for executives and security teams

CVE-2010-0651 is an old WebKit browser issue that could let a malicious web page read sensitive cross-origin information through malformed CSS handling. The public bundle identifies affected WebKit before r52784, Google Chrome before 4.0.249.78, and Apple Safari before 4.0.5. Exposure is most plausible where legacy WebKit-based browsers, old Chrome versions, or old Safari versions remain in use. Modern managed endpoints are unlikely to run these versions, but kiosks, embedded systems, or unsupported desktops should be checked. Treat this as a legacy exposure cleanup item unless affected browsers are still used for sensitive work. It is not KEV-listed in the provided evidence, but the impact is cross-origin information exposure. Mitigation focus: Upgrade Chrome beyond 4.0.249.78 and Safari beyond 4.0.5 where present.; Remove or isolate unsupported WebKit-based browsers from business workflows.; Check vendor advisories for platform-specific package updates and backports..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.