Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers…
Priority MEDIUM 46CWE-416Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-416 and the CVSS impact.
Summary
Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to visibility events.
Why it matters now
EPSS 0.01655 76th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 70
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:* | 12.1 | Vulnerable | openSUSE |
| cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:* | 12.2 | Vulnerable | openSUSE |
| cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | up to 23.0.1271.96 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.0:*:*:*:*:*:*:* | 23.0.1271.0 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.1:*:*:*:*:*:*:* | 23.0.1271.1 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.2:*:*:*:*:*:*:* | 23.0.1271.2 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.3:*:*:*:*:*:*:* | 23.0.1271.3 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.4:*:*:*:*:*:*:* | 23.0.1271.4 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.5:*:*:*:*:*:*:* | 23.0.1271.5 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.6:*:*:*:*:*:*:* | 23.0.1271.6 | Vulnerable |
- cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:* Versions 12.1 Vulnerable ·openSUSE
- cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:* Versions 12.2 Vulnerable ·openSUSE
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions up to 23.0.1271.96 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.0:*:*:*:*:*:*:* Versions 23.0.1271.0 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.1:*:*:*:*:*:*:* Versions 23.0.1271.1 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.2:*:*:*:*:*:*:* Versions 23.0.1271.2 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.3:*:*:*:*:*:*:* Versions 23.0.1271.3 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.4:*:*:*:*:*:*:* Versions 23.0.1271.4 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.5:*:*:*:*:*:*:* Versions 23.0.1271.5 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.6:*:*:*:*:*:*:* Versions 23.0.1271.6 Vulnerable ·Google
Show 60 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:google:chrome:23.0.1271.7:*:*:*:*:*:*:* | 23.0.1271.7 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.8:*:*:*:*:*:*:* | 23.0.1271.8 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.9:*:*:*:*:*:*:* | 23.0.1271.9 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.10:*:*:*:*:*:*:* | 23.0.1271.10 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.11:*:*:*:*:*:*:* | 23.0.1271.11 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.12:*:*:*:*:*:*:* | 23.0.1271.12 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.13:*:*:*:*:*:*:* | 23.0.1271.13 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.14:*:*:*:*:*:*:* | 23.0.1271.14 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.15:*:*:*:*:*:*:* | 23.0.1271.15 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.16:*:*:*:*:*:*:* | 23.0.1271.16 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.17:*:*:*:*:*:*:* | 23.0.1271.17 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.18:*:*:*:*:*:*:* | 23.0.1271.18 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.19:*:*:*:*:*:*:* | 23.0.1271.19 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.20:*:*:*:*:*:*:* | 23.0.1271.20 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.21:*:*:*:*:*:*:* | 23.0.1271.21 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.22:*:*:*:*:*:*:* | 23.0.1271.22 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.23:*:*:*:*:*:*:* | 23.0.1271.23 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.24:*:*:*:*:*:*:* | 23.0.1271.24 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.26:*:*:*:*:*:*:* | 23.0.1271.26 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.30:*:*:*:*:*:*:* | 23.0.1271.30 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.31:*:*:*:*:*:*:* | 23.0.1271.31 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.32:*:*:*:*:*:*:* | 23.0.1271.32 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.33:*:*:*:*:*:*:* | 23.0.1271.33 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.35:*:*:*:*:*:*:* | 23.0.1271.35 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.36:*:*:*:*:*:*:* | 23.0.1271.36 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.37:*:*:*:*:*:*:* | 23.0.1271.37 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.38:*:*:*:*:*:*:* | 23.0.1271.38 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.39:*:*:*:*:*:*:* | 23.0.1271.39 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.40:*:*:*:*:*:*:* | 23.0.1271.40 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.41:*:*:*:*:*:*:* | 23.0.1271.41 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.44:*:*:*:*:*:*:* | 23.0.1271.44 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.45:*:*:*:*:*:*:* | 23.0.1271.45 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.46:*:*:*:*:*:*:* | 23.0.1271.46 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.49:*:*:*:*:*:*:* | 23.0.1271.49 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.50:*:*:*:*:*:*:* | 23.0.1271.50 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.51:*:*:*:*:*:*:* | 23.0.1271.51 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.52:*:*:*:*:*:*:* | 23.0.1271.52 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.53:*:*:*:*:*:*:* | 23.0.1271.53 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.54:*:*:*:*:*:*:* | 23.0.1271.54 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.55:*:*:*:*:*:*:* | 23.0.1271.55 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.56:*:*:*:*:*:*:* | 23.0.1271.56 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.57:*:*:*:*:*:*:* | 23.0.1271.57 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.58:*:*:*:*:*:*:* | 23.0.1271.58 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.59:*:*:*:*:*:*:* | 23.0.1271.59 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.60:*:*:*:*:*:*:* | 23.0.1271.60 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.61:*:*:*:*:*:*:* | 23.0.1271.61 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.62:*:*:*:*:*:*:* | 23.0.1271.62 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.64:*:*:*:*:*:*:* | 23.0.1271.64 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.83:*:*:*:*:*:*:* | 23.0.1271.83 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.84:*:*:*:*:*:*:* | 23.0.1271.84 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.85:*:*:*:*:*:*:* | 23.0.1271.85 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.86:*:*:*:*:*:*:* | 23.0.1271.86 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.87:*:*:*:*:*:*:* | 23.0.1271.87 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.88:*:*:*:*:*:*:* | 23.0.1271.88 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.89:*:*:*:*:*:*:* | 23.0.1271.89 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.91:*:*:*:*:*:*:* | 23.0.1271.91 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.92:*:*:*:*:*:*:* | 23.0.1271.92 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.93:*:*:*:*:*:*:* | 23.0.1271.93 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.94:*:*:*:*:*:*:* | 23.0.1271.94 | Vulnerable | |
| cpe:2.3:a:google:chrome:23.0.1271.95:*:*:*:*:*:*:* | 23.0.1271.95 | Vulnerable |
- cpe:2.3:a:google:chrome:23.0.1271.7:*:*:*:*:*:*:* Versions 23.0.1271.7 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.8:*:*:*:*:*:*:* Versions 23.0.1271.8 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.9:*:*:*:*:*:*:* Versions 23.0.1271.9 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.10:*:*:*:*:*:*:* Versions 23.0.1271.10 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.11:*:*:*:*:*:*:* Versions 23.0.1271.11 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.12:*:*:*:*:*:*:* Versions 23.0.1271.12 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.13:*:*:*:*:*:*:* Versions 23.0.1271.13 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.14:*:*:*:*:*:*:* Versions 23.0.1271.14 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.15:*:*:*:*:*:*:* Versions 23.0.1271.15 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.16:*:*:*:*:*:*:* Versions 23.0.1271.16 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.17:*:*:*:*:*:*:* Versions 23.0.1271.17 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.18:*:*:*:*:*:*:* Versions 23.0.1271.18 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.19:*:*:*:*:*:*:* Versions 23.0.1271.19 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.20:*:*:*:*:*:*:* Versions 23.0.1271.20 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.21:*:*:*:*:*:*:* Versions 23.0.1271.21 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.22:*:*:*:*:*:*:* Versions 23.0.1271.22 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.23:*:*:*:*:*:*:* Versions 23.0.1271.23 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.24:*:*:*:*:*:*:* Versions 23.0.1271.24 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.26:*:*:*:*:*:*:* Versions 23.0.1271.26 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.30:*:*:*:*:*:*:* Versions 23.0.1271.30 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.31:*:*:*:*:*:*:* Versions 23.0.1271.31 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.32:*:*:*:*:*:*:* Versions 23.0.1271.32 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.33:*:*:*:*:*:*:* Versions 23.0.1271.33 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.35:*:*:*:*:*:*:* Versions 23.0.1271.35 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.36:*:*:*:*:*:*:* Versions 23.0.1271.36 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.37:*:*:*:*:*:*:* Versions 23.0.1271.37 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.38:*:*:*:*:*:*:* Versions 23.0.1271.38 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.39:*:*:*:*:*:*:* Versions 23.0.1271.39 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.40:*:*:*:*:*:*:* Versions 23.0.1271.40 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.41:*:*:*:*:*:*:* Versions 23.0.1271.41 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.44:*:*:*:*:*:*:* Versions 23.0.1271.44 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.45:*:*:*:*:*:*:* Versions 23.0.1271.45 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.46:*:*:*:*:*:*:* Versions 23.0.1271.46 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.49:*:*:*:*:*:*:* Versions 23.0.1271.49 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.50:*:*:*:*:*:*:* Versions 23.0.1271.50 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.51:*:*:*:*:*:*:* Versions 23.0.1271.51 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.52:*:*:*:*:*:*:* Versions 23.0.1271.52 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.53:*:*:*:*:*:*:* Versions 23.0.1271.53 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.54:*:*:*:*:*:*:* Versions 23.0.1271.54 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.55:*:*:*:*:*:*:* Versions 23.0.1271.55 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.56:*:*:*:*:*:*:* Versions 23.0.1271.56 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.57:*:*:*:*:*:*:* Versions 23.0.1271.57 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.58:*:*:*:*:*:*:* Versions 23.0.1271.58 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.59:*:*:*:*:*:*:* Versions 23.0.1271.59 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.60:*:*:*:*:*:*:* Versions 23.0.1271.60 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.61:*:*:*:*:*:*:* Versions 23.0.1271.61 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.62:*:*:*:*:*:*:* Versions 23.0.1271.62 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.64:*:*:*:*:*:*:* Versions 23.0.1271.64 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.83:*:*:*:*:*:*:* Versions 23.0.1271.83 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.84:*:*:*:*:*:*:* Versions 23.0.1271.84 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.85:*:*:*:*:*:*:* Versions 23.0.1271.85 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.86:*:*:*:*:*:*:* Versions 23.0.1271.86 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.87:*:*:*:*:*:*:* Versions 23.0.1271.87 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.88:*:*:*:*:*:*:* Versions 23.0.1271.88 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.89:*:*:*:*:*:*:* Versions 23.0.1271.89 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.91:*:*:*:*:*:*:* Versions 23.0.1271.91 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.92:*:*:*:*:*:*:* Versions 23.0.1271.92 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.93:*:*:*:*:*:*:* Versions 23.0.1271.93 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.94:*:*:*:*:*:*:* Versions 23.0.1271.94 Vulnerable ·Google
- cpe:2.3:a:google:chrome:23.0.1271.95:*:*:*:*:*:*:* Versions 23.0.1271.95 Vulnerable ·Google
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2012-5139
- 2026-10-03 Alias added: GHSA-278q-x23r-mw73
References
Sources
- CVE-2012-5139 · CVE Program
- CVE-2012-5139 · NVD
- FIRST EPSS
- GHSA-278q-x23r-mw73 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences