# CVEs published 2012-09-26 31 CVEs were published on September 26, 2012: 0 critical, 1 high. Days are UTC. - [CVE-2012-2874](https://cve.now/CVE-2012-2874.md): Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other (no CVSS) - [CVE-2012-2875](https://cve.now/CVE-2012-2875.md): Multiple unspecified vulnerabilities in the PDF functionality in Google Chrome before 22.0.1229.79 allow remote attackers to have an unknown (no CVSS) - [CVE-2012-2876](https://cve.now/CVE-2012-2876.md): Buffer overflow in the SSE2 optimization functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of ser (no CVSS) - [CVE-2012-2877](https://cve.now/CVE-2012-2877.md): The extension system in Google Chrome before 22.0.1229.79 does not properly handle modal dialogs, which allows remote attackers to cause a d (no CVSS) - [CVE-2012-2878](https://cve.now/CVE-2012-2878.md): Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS) - [CVE-2012-2879](https://cve.now/CVE-2012-2879.md): Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service (DOM topology corruption) via a crafted document. (no CVSS) - [CVE-2012-2880](https://cve.now/CVE-2012-2880.md): Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other (no CVSS) - [CVE-2012-2881](https://cve.now/CVE-2012-2881.md): Google Chrome before 22.0.1229.79 does not properly handle plug-ins, which allows remote attackers to cause a denial of service (DOM tree co (no CVSS) - [CVE-2012-2882](https://cve.now/CVE-2012-2882.md): FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote attackers to cause a deni (no CVSS) - [CVE-2012-2883](https://cve.now/CVE-2012-2883.md): Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other (no CVSS) - [CVE-2012-2884](https://cve.now/CVE-2012-2884.md): Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecifie (no CVSS) - [CVE-2012-2885](https://cve.now/CVE-2012-2885.md): Double free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspeci (no CVSS) - [CVE-2012-2886](https://cve.now/CVE-2012-2886.md): Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2012-2887](https://cve.now/CVE-2012-2887.md): Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS) - [CVE-2012-2888](https://cve.now/CVE-2012-2888.md): Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS) - [CVE-2012-2889](https://cve.now/CVE-2012-2889.md): Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2012-2890](https://cve.now/CVE-2012-2890.md): Use-after-free vulnerability in the PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of serv (no CVSS) - [CVE-2012-2891](https://cve.now/CVE-2012-2891.md): The IPC implementation in Google Chrome before 22.0.1229.79 allows attackers to obtain potentially sensitive information about memory addres (no CVSS) - [CVE-2012-2892](https://cve.now/CVE-2012-2892.md): Unspecified vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to bypass the pop-up blocker via unknown vectors. (no CVSS) - [CVE-2012-2893](https://cve.now/CVE-2012-2893.md): Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or (no CVSS) - [CVE-2012-2894](https://cve.now/CVE-2012-2894.md): Google Chrome before 22.0.1229.79 does not properly handle graphics-context data structures, which allows remote attackers to cause a denial (no CVSS) - [CVE-2012-2895](https://cve.now/CVE-2012-2895.md): The PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified (no CVSS) - [CVE-2012-2896](https://cve.now/CVE-2012-2896.md): Integer overflow in the WebGL implementation in Google Chrome before 22.0.1229.79 on Mac OS X allows remote attackers to cause a denial of s (no CVSS) - [CVE-2012-2897](https://cve.now/CVE-2012-2897.md): The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 (CVSS 7.8) - [CVE-2012-1116](https://cve.now/CVE-2012-1116.md): SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to execute arbitrary SQL commands via unspecifie (no CVSS) - [CVE-2012-1117](https://cve.now/CVE-2012-1117.md): Cross-site scripting (XSS) vulnerability in Joomla! 2.5.0 and 2.5.1 allows remote attackers to inject arbitrary web script or HTML via unspe (no CVSS) - [CVE-2012-1188](https://cve.now/CVE-2012-1188.md): Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML v (no CVSS, forkcms/forkcms) - [CVE-2012-1617](https://cve.now/CVE-2012-1617.md): Directory traversal vulnerability in combine.php in OSClass before 2.3.6 allows remote attackers to read and write arbitrary files via a .. (no CVSS) - [CVE-2012-5162](https://cve.now/CVE-2012-5162.md): Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL com (no CVSS) - [CVE-2012-5163](https://cve.now/CVE-2012-5163.md): Cross-site scripting (XSS) vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to inject arbitrary web s (no CVSS) - [CVE-2012-5164](https://cve.now/CVE-2012-5164.md): Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML v (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-09-26 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.