CVE-2012-2886

Google Chrome < 22.0.1229.79 - Cross-Site Scripting via Google V8 Bindings

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Google V8 bindings, aka "Universal XSS (UXSS)."

References (5)

Core 5

Core References

Release Notes, Vendor Advisory x_refsource_confirm

http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14916

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/78824

Issue Tracking x_refsource_confirm

https://code.google.com/p/chromium/issues/detail?id=143437

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html

Scores

EPSS 0.0141

EPSS Percentile 69.6%

Details

CWE

CWE-79

Status published

Products (50)

google/chrome 22.0.1229.0

google/chrome 22.0.1229.1

google/chrome 22.0.1229.2

google/chrome 22.0.1229.3

google/chrome 22.0.1229.4

google/chrome 22.0.1229.6

google/chrome 22.0.1229.7

google/chrome 22.0.1229.8

google/chrome 22.0.1229.9

google/chrome 22.0.1229.10

... and 40 more

Published Sep 26, 2012

Tracked Since Feb 18, 2026