CVE-2012-4050
CVE-2012-4050 is a critical-severity vulnerability in Google Chrome Os with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Critical (CVSS 2.0 base score 10.0)
- EPSS exploit prediction: 1% (49th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Google Chrome Os
- Published:
- Last modified:
Description
Multiple unspecified vulnerabilities in Google Chrome OS before 21.0.1180.50 on the Cr-48 and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, have unknown impact and attack vectors.
Frequently asked questions
- What is CVE-2012-4050?
- Multiple unspecified vulnerabilities in Google Chrome OS before 21.0.1180.50 on the Cr-48 and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, have unknown impact and attack vectors.
- How severe is CVE-2012-4050?
- CVE-2012-4050 has a CVSS 2.0 base score of 10.0, rated critical severity.
- Is CVE-2012-4050 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (49th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2012-4050?
- CVE-2012-4050 primarily affects Google Chrome Os. In total, 31 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2012-4050?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2012-4050 published?
- CVE-2012-4050 was published on 2012-07-24 and last updated on 2026-06-16.
References
- http://googlechromereleases.blogspot.com/2012/07/beta-channel-update-for-chrome-os.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77191
Affected products (31)
- cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.1:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.2:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.3:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.4:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.5:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.6:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.7:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.8:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.9:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.10:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.11:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.13:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.14:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.15:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.17:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.18:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.31:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.32:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.33:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.34:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.35:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.36:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.37:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.38:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.39:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.41:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.46:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.47:*:*:*:*:*:*:*
- cpe:2.3:o:google:chrome_os:21.0.1180.48:*:*:*:*:*:*:*
More vulnerabilities in Google Chrome Os
- CVE-2014-3188 — Critical (CVSS 10.0): Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and…
- CVE-2014-1708 — Critical (CVSS 10.0): The boot implementation in Google Chrome OS before 33.0.1750.152 does not properly consider file persistence, which…
- CVE-2013-2833 — Critical (CVSS 10.0): Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to…
- CVE-2013-0915 — Critical (CVSS 10.0): The GPU process in Google Chrome OS before 25.0.1364.173 allows attackers to cause a denial of service or possibly have…
- CVE-2012-2864 — Critical (CVSS 10.0): Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook…
- CVE-2012-3290 — Critical (CVSS 10.0): Multiple unspecified vulnerabilities in Google Chrome before 20.0.1132.22 on the Acer AC700; Samsung Series 5, 5 550,…