CVE-2012-1846

Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a sandboxed process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012. NOTE: the primary affected product may be clarified later; it was not identified by the researcher, who reportedly stated "it really doesn't matter if it's third-party code."

• CWE-668

• http://pwn2own.zerodayinitiative.com/status.htmlNot Applicable
• http://twitter.com/vupen/statuses/177576000761237505Broken Link
• http://www.forbes.com/sites/andygreenberg/2012/03/21/meet-the-hackers-who-sell-spies-the-tools-to-crack-your-pc-and-get-paid-six-figure-fees/Press/Media Coverage
• http://www.zdnet.com/blog/security/pwn2own-2012-google-chrome-browser-sandbox-first-to-fall/10588Press/Media Coverage
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74324Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14940Third Party Advisory
• http://pwn2own.zerodayinitiative.com/status.htmlNot Applicable
• http://twitter.com/vupen/statuses/177576000761237505Broken Link
• http://www.forbes.com/sites/andygreenberg/2012/03/21/meet-the-hackers-who-sell-spies-the-tools-to-crack-your-pc-and-get-paid-six-figure-fees/Press/Media Coverage
• http://www.zdnet.com/blog/security/pwn2own-2012-google-chrome-browser-sandbox-first-to-fall/10588Press/Media Coverage
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74324Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14940Third Party Advisory

Published

Mar 22, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-1840AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 does no…
• CVE-2012-1841Absolute path traversal vulnerability in logShow.htm on the …
• CVE-2012-1842Cross-site scripting (XSS) vulnerability in checkQKMProg.htm…
• CVE-2012-1843Cross-site request forgery (CSRF) vulnerability in saveResto…
• CVE-2012-1844The Quantum Scalar i500 tape library with firmware before i7…
• CVE-2012-1845Use-after-free vulnerability in Google Chrome 17.0.963.66 an…
• CVE-2012-1847Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold an…
• CVE-2012-1848win32k.sys in the kernel-mode drivers in Microsoft Windows X…
• CVE-2012-1849Untrusted search path vulnerability in Microsoft Lync 2010, …
• CVE-2012-1850The Remote Administration Protocol (RAP) implementation in t…
• CVE-2012-1851Format string vulnerability in the Print Spooler service in …
• CVE-2012-1852Heap-based buffer overflow in the Remote Administration Prot…