CVE-2010-2109: Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause...

Security readout for executives and security teams

This is an old Google Chrome drag-and-drop vulnerability fixed before version 5.0.375.55. A user would likely need to interact with malicious content. The documented impact is browser denial of service from a memory error, with other impact left unspecified. Current exposure should be limited to environments still running Chrome before 5.0.375.55 or relying on unpatched embedded Chromium-era builds. The source bundle does not identify other affected products. Low immediate priority for normally managed fleets, but investigate if legacy browser use exists. The main business risk is obsolete endpoint software, not a currently evidenced exploitation campaign. Mitigation focus: Confirm Chrome is version 5.0.375.55 or later.; Prefer migration to a currently supported Chrome release.; Check vendor release notes for any environment-specific guidance..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.