CVEvulnerability
CVE-2012-2886
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-09-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Google V8 bindings, aka "Universal XSS (UXSS)."
Affected configurations
• google chrome (<= 22.0.1229.78)
• google chrome 22.0.1229.0
• google chrome 22.0.1229.1
• google chrome 22.0.1229.2
• google chrome 22.0.1229.3
• google chrome 22.0.1229.4
• google chrome 22.0.1229.6
• google chrome 22.0.1229.7
• google chrome 22.0.1229.8
• google chrome 22.0.1229.9
• google chrome 22.0.1229.10
• google chrome 22.0.1229.11
• google chrome 22.0.1229.12
• google chrome 22.0.1229.14
• google chrome 22.0.1229.16
• google chrome 22.0.1229.17
• google chrome 22.0.1229.18
• google chrome 22.0.1229.20
• google chrome 22.0.1229.21
• google chrome 22.0.1229.22
• google chrome 22.0.1229.23
• google chrome 22.0.1229.24
• google chrome 22.0.1229.25
• google chrome 22.0.1229.26
• google chrome 22.0.1229.27
• google chrome 22.0.1229.28
• google chrome 22.0.1229.29
• google chrome 22.0.1229.31
• google chrome 22.0.1229.32
• google chrome 22.0.1229.33
• google chrome 22.0.1229.35
• google chrome 22.0.1229.36
• google chrome 22.0.1229.37
• google chrome 22.0.1229.39
• google chrome 22.0.1229.48
• google chrome 22.0.1229.49
• google chrome 22.0.1229.50
• google chrome 22.0.1229.51
• google chrome 22.0.1229.52
• google chrome 22.0.1229.53
• google chrome 22.0.1229.54
• google chrome 22.0.1229.55
• google chrome 22.0.1229.56
• google chrome 22.0.1229.57
• google chrome 22.0.1229.58
• google chrome 22.0.1229.59
• google chrome 22.0.1229.60
• google chrome 22.0.1229.62
• google chrome 22.0.1229.63
• google chrome 22.0.1229.64
• google chrome 22.0.1229.65
• google chrome 22.0.1229.67
• google chrome 22.0.1229.76
• opensuse opensuse 12.1
• opensuse opensuse 12.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html googlechromereleases.blogspot.com
- http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html lists.opensuse.org
- https://code.google.com/p/chromium/issues/detail?id=143437 code.google.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78824 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14916 oval.cisecurity.org
- http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html googlechromereleases.blogspot.com
- http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html lists.opensuse.org
- https://code.google.com/p/chromium/issues/detail?id=143437 code.google.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78824 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14916 oval.cisecurity.org