CVE-2012-5146: Google Chrome

Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days.

Google Chrome before 24.0.1312.52 allows remote attackers to bypass the Same Origin Policy via a malformed URL.

Affected products

• Google Chrome: up to and including 24.0.1312.51; version 24.0.1272.0 only; version 24.0.1272.1 only; version 24.0.1273.0 only; version 24.0.1274.0 only; version 24.0.1275.0 only; …
• Opensuse Opensuse: version 12.1 only; version 12.2 only

Published 2013-01-15. Last modified 2026-06-16.