Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-yd45-93fw-13df
Vulnerability ID VCID-yd45-93fw-13df
Aliases CVE-2010-0162
Summary Mozilla security researcher Georgi Guninski reported that when a SVG document which is served with Content-Type: application/octet-stream is embedded into another document via an <embed> tag with type="image/svg+xml", the Content-Type is ignored and the SVG document is processed normally. A website which allows arbitrary binary data to be uploaded but which relies on Content-Type: application/octet-stream to prevent script execution could have such protection bypassed. An attacker could upload a SVG document containing JavaScript as a binary file to a website, embed the SVG document into a malicious page on another site, and gain access to the script environment from the SVG-serving site, bypassing the same-origin policy.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.01106 https://api.first.org/data/v1/epss?cve=CVE-2010-0162
generic_textual none https://www.mozilla.org/en-US/security/advisories/mfsa2010-05
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0162.json
https://api.first.org/data/v1/epss?cve=CVE-2010-0162
566052 https://bugzilla.redhat.com/show_bug.cgi?id=566052
CVE-2010-0162 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0162
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2010-05 https://www.mozilla.org/en-US/security/advisories/mfsa2010-05
RHSA-2010:0112 https://access.redhat.com/errata/RHSA-2010:0112
USN-895-1 https://usn.ubuntu.com/895-1/
USN-896-1 https://usn.ubuntu.com/896-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.78394
EPSS Score 0.01106
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T08:27:18.253782+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2010/mfsa2010-05.md 38.6.0