CVE-2010-3118

The autosuggest feature in the Omnibox implementation in Google Chrome before 5.0.375.127 does not anticipate entry of passwords, which might allow remote attackers to obtain sensitive information by reading the network traffic generated by this feature.

• CWE-200

• http://code.google.com/p/chromium/issues/detail?id=51146Exploit, Issue Tracking, Patch, Vendor Advisory
• http://googlechromereleases.blogspot.com/2010/08/stable-channel-update_19.htmlVendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11839Third Party Advisory
• http://code.google.com/p/chromium/issues/detail?id=51146Exploit, Issue Tracking, Patch, Vendor Advisory
• http://googlechromereleases.blogspot.com/2010/08/stable-channel-update_19.htmlVendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11839Third Party Advisory

Published

Aug 24, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3112Google Chrome before 5.0.375.127 does not properly implement…
• CVE-2010-3113Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5…
• CVE-2010-3114The text-editing implementation in Google Chrome before 5.0.…
• CVE-2010-3115Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6…
• CVE-2010-3116Multiple use-after-free vulnerabilities in WebKit, as used i…
• CVE-2010-3117Google Chrome before 5.0.375.127 does not properly implement…
• CVE-2010-3119Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 …
• CVE-2010-3120Google Chrome before 5.0.375.127 does not properly implement…
• CVE-2010-3121Buffer overflow in tm-console-bin in the DevonIT thin-client…
• CVE-2010-3122The DevonIT thin-client management tool relies on a shared s…
• CVE-2010-3124Untrusted search path vulnerability in bin/winvlc.c in VLC M…
• CVE-2010-3125Untrusted search path vulnerability in TeamMate Audit Manage…