CVE-2012-2854

Google Chrome <21.0.1180.57-21.0.1180.60 - Info Disclosure

Title source: llm
STIX 2.1

Description

Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to obtain potentially sensitive information about pointer values by leveraging access to a WebUI renderer process.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15698
Release Notes, Vendor Advisory x_refsource_confirm
http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html

Scores

EPSS 0.0095
EPSS Percentile 57.1%

Details

CWE
CWE-200
Status published
Products (26)
google/chrome 21.0.1180.0
google/chrome 21.0.1180.1
google/chrome 21.0.1180.2
google/chrome 21.0.1180.31
google/chrome 21.0.1180.32
google/chrome 21.0.1180.33
google/chrome 21.0.1180.34
google/chrome 21.0.1180.35
google/chrome 21.0.1180.36
google/chrome 21.0.1180.37
... and 16 more
Published Aug 06, 2012
Tracked Since Feb 18, 2026