CVE-2010-2108: Unspecified vulnerability in Google Chrome before 5.0.375.55 allows remote attackers to bypass the whitelis...

Security readout for executives and security teams

Very old Google Chrome versions could let a remote attacker bypass a browser setting meant to block plugins unless explicitly allowed. That weakens a security control around plugin execution, but the public bundle does not describe the attack method, impact beyond bypass, or active exploitation. Exposure is mainly legacy endpoints running Chrome before 5.0.375.55, especially where plugin whitelist-mode controls were relied on. Current managed Chrome fleets are unlikely to be exposed, but asset evidence is needed because the affected list is incomplete. Treat as a legacy hygiene issue unless old Chrome is present. The business risk rises if unsupported browsers or plugin-dependent workflows remain in production. Mitigation focus: Identify and retire Chrome versions older than 5.0.375.55.; Update any affected Chrome installations to 5.0.375.55 or later.; Check vendor release guidance before relying on compensating controls..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.