CVE-2010-2300

CVE-2010-2300 describes a critical use-after-free vulnerability in WebKit's Element::normalizeAttributes function, specifically impacting Google Chrome versions prior to 5.0.375.70. This flaw allows remote attackers to execute arbitrary code or cause a denial of service through memory corruption, primarily via DOM mutation event handlers. With a CVSS score of 10.0, it represents a severe threat with network-based exploitation, low attack complexity, and complete confidentiality, integrity, and availability impacts. While not listed on the KEV catalog or having widespread community discussion, an exploit for Android 2.2 was published on ExploitDB, indicating its potential for targeted exploitation.