CVE-2012-5156: Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial...

Security readout for executives and security teams

CVE-2012-5156 is an old Google Chrome use-after-free issue affecting versions before 24.0.1312.52. A malicious PDF field could crash the browser and may have had other unspecified impact. The public bundle does not provide CVSS, confirmed exploitation, or detailed impact, so urgency depends on whether obsolete Chrome versions remain in the environment. Exposure is likely limited to endpoints still running Google Chrome versions earlier than 24.0.1312.52, especially where users can open or view PDFs in the browser. Modern managed Chrome deployments should not be affected if automatic updates are enforced. Treat this as a legacy hygiene issue unless obsolete Chrome is still present. It should not displace current critical threats, but any unsupported browser remaining in production is a broader security and compliance risk that should be removed. Mitigation focus: Confirm Chrome is updated to 24.0.1312.52 or later.; Retire or isolate endpoints running unsupported legacy Chrome builds.; Enforce managed browser auto-update across user endpoints..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.