CVE-2012-2872

no score yetEPSS 1.1%

Cross-site scripting (XSS) vulnerability in an SSL interstitial page in Google Chrome before 21.0.1180.89 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2012-08-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

google:chrome
opensuse:opensuse

References

http://code.google.com/p/chromium/issues/detail?id=142956
http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00030.html
http://osvdb.org/85037
https://exchange.xforce.ibmcloud.com/vulnerabilities/78181

Check your stack JSON