‹ Back to list

CVE-2012-6636

Status: ModifiedMedium (6.8)—Exploit
Severity6.8Medium · CVSS 2.0
Exploitation probability38 %higher than 99% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitAvailablePublished on Exploit-DB · Proof of concept on GitHub (unverified) · Metasploit module (reliable, widely available exploit)

The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote attackers to execute arbitrary methods of Java objects by using the Java Reflection API within crafted JavaScript code that is loaded into the WebView component in an application targeted to API level 16 or earlier, a related issue to CVE-2013-4710.

CVSS

Base score
6.8
Version
2.0
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days
38 %
Percentile among all scored CVEs
99
Score date
10/20/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Public exploits

Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.

⚠️ GitHub proofs of concept are not verified: some are fake or contain malware. Never run them outside an isolated lab.

Affected technologies (1)

Google — Android API

CWEs

References

Show 16 references

Raw JSON (NVD)

Show
{
  "id": "CVE-2012-6636",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-03-03T04:50:46.173",
  "references": [
    {
      "url": "http://50.56.33.56/blog/?p=314",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://developer.android.com/reference/android/os/Build.VERSION_CODES.html#JELLY_BEAN_MR1",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://developer.android.com/reference/android/webkit/WebView.html#addJavascriptInterface%28java.lang.Object%2C%20java.lang.String%29",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://jvn.jp/en/jp/JVN62161191/index.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2014/02/07/9",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.internetsociety.org/ndss2014/programme#session3",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://support.lenovo.com/us/en/product_security/len_6421",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://50.56.33.56/blog/?p=314",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://developer.android.com/reference/android/os/Build.VERSION_CODES.html#JELLY_BEAN_MR1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://developer.android.com/reference/android/webkit/WebView.html#addJavascriptInterface%28java.lang.Object%2C%20java.lang.String%29",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://jvn.jp/en/jp/JVN62161191/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2014/02/07/9",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.internetsociety.org/ndss2014/programme#session3",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.lenovo.com/us/en/product_security/len_6421",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote attackers to execute arbitrary methods of Java objects by using the Java Reflection API within crafted JavaScript code that is loaded into the WebView component in an application targeted to API level 16 or earlier, a related issue to CVE-2013-4710."
    },
    {
      "lang": "es",
      "value": "La API Android anterior a 17 no restringe debidamente el método WebView.addJavascriptInterface, lo que permite a atacantes remotos ejecutar métodos arbitrarios de objetos Java mediante el uso de la API Java Reflection dentro de código JavaScript manipulado que es subido en el componente WebView en una aplicación dirigida a API nivel 16 o anteriores, un problema relacionado con CVE-2013-4710."
    }
  ],
  "lastModified": "2026-06-16T23:48:31.373",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:google:android_api:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF0E43F4-A9E4-41A7-BD5E-FEBE1B13C416",
              "versionEndIncluding": "16.0"
            },
            {
              "criteria": "cpe:2.3:a:google:android_api:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B2BA432-3C5D-4689-99EA-57B668FDE5EE"
            },
            {
              "criteria": "cpe:2.3:a:google:android_api:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D77164D-E860-4D5E-85B9-63E7FF3B11B0"
            },
            {
              "criteria": "cpe:2.3:a:google:android_api:3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "42C30C43-7E0D-4B2B-B657-AD7656689EE5"
            },
            {
              "criteria": "cpe:2.3:a:google:android_api:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "537554A8-B389-4530-8F6A-15234499C478"
            },
            {
              "criteria": "cpe:2.3:a:google:android_api:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A91FFDD0-7EF9-4084-8183-34A06996AA8C"
            },
            {
              "criteria": "cpe:2.3:a:google:android_api:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9EA8EDC3-AD75-453B-ADE7-4706662A2694"
            },
            {
              "criteria": "cpe:2.3:a:google:android_api:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E7E062E1-2F2F-4340-8D3B-7ACDBE97CEFB"
            },
            {
              "criteria": "cpe:2.3:a:google:android_api:8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9791CD3-61D4-40DC-8788-1EDA74ABB1C8"
            },
            {
              "criteria": "cpe:2.3:a:google:android_api:9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6A2B82A9-D1C6-47F3-9176-A2E9A71A4A3F"
            },
            {
              "criteria": "cpe:2.3:a:google:android_api:10.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B2BFAF7-624C-4908-B497-C2E22B4E5762"
            },
            {
              "criteria": "cpe:2.3:a:google:android_api:11.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E6A37969-CDF3-4A2C-9243-F04EFEF7270C"
            },
            {
              "criteria": "cpe:2.3:a:google:android_api:12.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "044BBE2B-EF30-4214-9FD5-517A5A17CE96"
            },
            {
              "criteria": "cpe:2.3:a:google:android_api:13.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7FA76D25-FC17-49D8-A3E5-C69E3CCE0775"
            },
            {
              "criteria": "cpe:2.3:a:google:android_api:14.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6CF72E87-A5CE-48EB-A612-1CB861D2FD02"
            },
            {
              "criteria": "cpe:2.3:a:google:android_api:15.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4994464-D5DD-4BB0-AC1D-D1F2195B6FFD"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}