Arbitrary File Write Vulnerability in Google Chrome's Inter-process Communication (IPC) Implementation

Arbitrary File Write Vulnerability in Google Chrome's Inter-process Communication (IPC) Implementation

CVE-2012-5376 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

The Inter-process Communication (IPC) implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging access to a renderer process, a different vulnerability than CVE-2012-5112.

Learn more about our Cis Benchmark Audit For Google Chrome.