CVE-2010-0556

CVE-2010-0556 describes a vulnerability in Google Chrome versions prior to 4.0.249.89 where the browser's Password Manager could auto-populate authentication dialogs with credentials intended for a different website. This flaw allowed user-assisted remote HTTP servers to potentially obtain sensitive information if a user visited a malicious URL, such as one embedded in an IMG tag, that triggered an authentication prompt. The vulnerability has a CVSS score of 4.3, indicating a medium attack complexity and a potential impact of partial information disclosure, but no impact on confidentiality or integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion beyond a single mention.