CVE-2012-2868
Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of...
Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving improper interaction between worker processes and an XMLHttpRequest (aka XHR) object.
Exploit likelihood
What each source reports
NVD Score used
Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving improper interaction between worker processes and an XMLHttpRequest (aka XHR) object.
- Record
CVE-2012-2868- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE List No score
Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving improper interaction between worker processes and an XMLHttpRequest (aka XHR) object.
- Record
CVE-2012-2868- Updated
- 2026-11-02
EUVDEUVD-2012-2848 No score
Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving improper interaction between worker processes and an XMLHttpRequest (aka XHR) object.
- Record
EUVD-2012-2848- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-frmw-h42x-4q9h No score
Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of...
Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving improper interaction between worker processes and an XMLHttpRequest (aka XHR) object.
- Record
GHSA-frmw-h42x-4q9h- Weakness
- CWE-362
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10171-1 No score
chromedriver-55.0.2883.75-3.1 on GA media
These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10171-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2868 is a medium vulnerability (CVSS 6.8) in Google Chrome, published August 31, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.95%, the 61st percentile. Fixed in chromium 55.0.2883.75-3.1.
References
code.google.com/p/chromium/issues/detail?id=136881
googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html
exchange.xforce.ibmcloud.com/vulnerabilities/78177
osvdb.org/85033
lists.opensuse.org/opensuse-security-announce/2012-09/msg00030.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15842
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2012-2868
github.com/advisories/GHSA-frmw-h42x-4q9h
suse.com/security/cve/CVE-2011-3015
Left out here: 2,140 references. The JSON record has them.