CVE-2012-4908

CVE-2012-4908 describes a Same Origin Policy bypass vulnerability in Google Chrome for Android versions prior to 18.0.1025308. This flaw allows remote attackers to access local files on an affected device through the use of symbolic links. With a CVSS score of 7.5, this vulnerability is considered highly severe, enabling an unauthenticated attacker to achieve partial confidentiality, integrity, and availability impacts over a network with low attack complexity. While not listed on the CISA KEV catalog, an exploit for this vulnerability is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.