CVE-2010-3417: Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension history, w...

Security readout for executives and security teams

Older Google Chrome versions could expose a user's extension history without first asking for permission. That history may reveal sensitive browsing or extension-use patterns. The public record is sparse and does not describe the attack path or impact beyond potential information disclosure. Exposure is limited to environments still running Google Chrome before 6.0.472.59. Current exposure should be uncommon in managed fleets, but legacy systems, frozen images, or unmanaged endpoints should be checked. Low unless the organization still operates very old Chrome builds. The main business action is confirming legacy browser absence, because the source record lacks severity scoring and exploitation evidence. Mitigation focus: Upgrade or remove Chrome installations older than 6.0.472.59.; Check Google Chrome release notes and Chromium issue history for vendor guidance.; Retire unmanaged legacy browser images that cannot be upgraded..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.