Unrated severityNVD Advisory· Published Sep 13, 2012· Updated Jun 16, 2026

CVE-2012-4904

Description

Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecified vectors, as demonstrated by "Universal XSS (UXSS)" attacks against the current tab.

Affected products

Google/Chrome2 versions
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <=18.0.1025306
- (no CPE)range: <18.0.1025308

Patches

Vulnerability mechanics

References

googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.htmlnvdVendor Advisory
code.google.com/p/chromium/issues/detailnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000