CVE-2010-0656: WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing page in resp...

Security readout for executives and security teams

This flaw lets a malicious local HTML file ask an old WebKit-based browser for a file:// directory and receive a directory listing. That could expose filenames or other sensitive local information. The bundle names WebKit before r51295 and Google Chrome before 4.0.249.78; it provides no CVSS score or active-exploitation evidence. Exposure is most plausible in legacy desktops, unsupported Linux packages, kiosk systems, embedded WebKit clients, or archived enterprise images using old WebKit or Chrome builds. Modern, maintained browsers are unlikely to be affected, but embedded WebKit usage should be checked separately. Treat this as a legacy hygiene issue unless affected old browser or WebKit builds remain in use. Prioritize removal or upgrade on managed systems because the issue can expose local information, but the bundle does not support emergency response or active-exploitation claims. Mitigation focus: Update WebKit-based software beyond WebKit r51295 where vendor packages are available.; Update Google Chrome to 4.0.249.78 or later, preferably a supported current release.; Remove unsupported legacy browsers from managed endpoints and gold images..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.