Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2010-4210

33
FAUCET Score

CVE-2010-4210 is a critical vulnerability affecting FreeBSD versions 7.x before 7.3-RELEASE and 8.x before 8.0-RC1, stemming from an improper mutex unlock in the pfs_getextattr function when handling pseudofs. This flaw allows local users to trigger a kernel panic, leading to a denial of service, and potentially overwrite arbitrary memory or execute arbitrary code. With a CVSS score of 7.8 (High), it presents a significant risk due to its low attack complexity and high impact on confidentiality, integrity, and availability. While not listed on CISA's KEV catalog and lacking widespread community discussion or media coverage, an exploit (EDB-15206) for privilege escalation is publicly available, indicating its potential for exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
>= 7.0, < 7.3CPE matchmatch criteria
cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:o:freebsd:freebsd:8.0:p1:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:o:freebsd:freebsd:8.0:p2:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:o:freebsd:freebsd:8.0:p3:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:o:freebsd:freebsd:8.0:p4:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.13%
Probability of exploitation in next 30 days
EPSS Percentile
63.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
ExploitDB: EDB-15206 · Oct 4, 2010
This CVE's current EPSS score of 0.0113 is in the 61st percentile among its peer group of 11,621 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

secunia.com / advisories/42200
Broken LinkVendor Advisory
security.freebsd.org / advisories/FreeBSD-SA-10:09.pseudofs.asc
Vendor Advisory
exchange.xforce.ibmcloud.com / vulnerabilities/63218
Third Party AdvisoryVDB Entry
exploit-db.com / exploits/15206
ExploitThird Party AdvisoryVDB Entry
securitytracker.com / id
Broken LinkThird Party AdvisoryVDB Entry
vupen.com / english/advisories/2010/2956
Broken LinkVendor Advisory