AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2012-6636

MEDIUM · CVSS 6.8 EPSS 41.36%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-03-03 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2012-6636
Severity
MEDIUM
CVSS
6.8
EPSS
41.36%
Android Java

Original NVD Description

The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote attackers to execute arbitrary methods of Java objects by using the Java Reflection API within crafted JavaScript code that is loaded into the WebView component in an application targeted to API level 16 or earlier, a related issue to CVE-2013-4710.