CVE-2010-3246: Google Chrome before 6.0.472.53 does not properly handle the _blank value for the target attribute of unspe...

Security readout for executives and security teams

This is an old Google Chrome issue where a malicious website could bypass the browser pop-up blocker. The source bundle does not show code execution, data theft, or active exploitation. Business urgency depends mainly on whether any legacy Chrome versions older than 6.0.472.53 remain in use. Exposure appears limited to systems running Google Chrome before 6.0.472.53. Modern managed browser fleets are unlikely to be affected, but evidence is incomplete because the bundle lists affected vendor and product as n/a. Handle as legacy browser hygiene, not an emergency, unless old Chrome builds remain deployed. The main business risk is user exposure to disruptive or deceptive pop-up behavior from malicious sites. Mitigation focus: Identify and remove any Chrome versions older than 6.0.472.53.; Upgrade affected systems to a vendor-supported Chrome version.; Check Google Chrome release guidance for historical fix details..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.