Unrated severityNVD Advisory· Published Sep 13, 2012· Updated Jun 16, 2026

CVE-2012-4907

Description

Google Chrome before 18.0.1025308 on Android does not properly restrict access from JavaScript code to Android APIs, which allows remote attackers to have an unspecified impact via a crafted web page.

Affected products

Google/Chrome2 versions
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <=18.0.1025306
- (no CPE)range: <18.0.1025308

Patches

Vulnerability mechanics

References

googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.htmlnvdVendor Advisory
code.google.com/p/chromium/issues/detailnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000