CVE-2012-4904
Google Chrome <18.0.1025308 - XSS
Title source: llmDescription
Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecified vectors, as demonstrated by "Universal XSS (UXSS)" attacks against the current tab.
Scores
EPSS
0.0015
EPSS Percentile
35.6%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
google/chrome
< 18.0.1025306
n/a/n/a
Timeline
Published
Sep 13, 2012
Tracked Since
Feb 18, 2026