Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-wbbj-pv5p-nuaa
Vulnerability ID VCID-wbbj-pv5p-nuaa
Aliases CVE-2012-3956
Summary Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team discovered a series of use-after-free issues using the Address Sanitizer tool. Many of these issues are potentially exploitable, allowing for remote code execution.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-416 Use After Free
System Score Found at
epss 0.02314 https://api.first.org/data/v1/epss?cve=CVE-2012-3956
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2012-58
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3956.json
https://api.first.org/data/v1/epss?cve=CVE-2012-3956
851910 https://bugzilla.redhat.com/show_bug.cgi?id=851910
CVE-2012-3956 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3956
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2012-58 https://www.mozilla.org/en-US/security/advisories/mfsa2012-58
RHSA-2012:1210 https://access.redhat.com/errata/RHSA-2012:1210
RHSA-2012:1211 https://access.redhat.com/errata/RHSA-2012:1211
USN-1548-1 https://usn.ubuntu.com/1548-1/
USN-1551-1 https://usn.ubuntu.com/1551-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.85041
EPSS Score 0.02314
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T08:27:25.130862+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2012/mfsa2012-58.md 38.6.0