CVE-2012-5376: Google Chrome

Critical severity, CVSS 9.6. EPSS: 2.1% chance of exploitation in the next 30 days.

The Inter-process Communication (IPC) implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging access to a renderer process, a different vulnerability than CVE-2012-5112.

Affected products

• Google Chrome: before 22.0.1229.94 (fixed in 22.0.1229.94)

Published 2012-10-11. Last modified 2026-06-16.