CVE-2012-10032

🗓️ 05 Aug 2025 20:03:14Reported by VulnCheckType

Maxthon3 versions before 3.3 are vulnerable to cross context scripting via the about:history page.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2012-10032	5 Aug 202520:03	–	attackerkb
BDU FSTEC	The vulnerability of the Maxthon3 browser lies in the insufficient protection of the web page structure, allowing attackers to execute arbitrary code.	13 Apr 202600:00	–	bdu_fstec
Circl	CVE-2012-10032	29 May 201815:50	–	circl
CNNVD	Maxthon 3 安全漏洞	5 Aug 202500:00	–	cnnvd
Cvelist	CVE-2012-10032 Maxthon3 about:history XCS Trusted Zone Code Execution	5 Aug 202520:03	–	cvelist
EUVD	EUVD-2012-6576	7 Oct 202500:30	–	euvd
Metasploit	Maxthon3 about:history XCS Trusted Zone Code Execution	26 Nov 201200:00	–	metasploit
NVD	CVE-2012-10032	5 Aug 202520:15	–	nvd
Positive Technologies	PT-2025-31984	5 Dec 201200:00	–	ptsecurity
RedhatCVE	CVE-2012-10032	7 Aug 202520:31	–	redhatcve

Vulners

CNA

Node

maxthon_international maxthon3_browserRange3.1.7–3.2.2

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "about:history"
    ],
    "product": "Maxthon3 Browser",
    "vendor": "Maxthon International Ltd.",
    "versions": [
      {
        "lessThanOrEqual": "3.2.2 build 1000",
        "status": "affected",
        "version": "3.1.7 build 600",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/23225
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/maxthon_history_xcs.rb
fortiguard	www.fortiguard.com/encyclopedia/ips/34203
maxthon	www.maxthon.com/
vulncheck	www.vulncheck.com/advisories/maxthon3-xcs-trusted-zone-code-exec
blog	www.blog.malerisch.net/2012/12/maxthon-cross-context-scripting-xcs-about-history-rce.html

28 Jul 2026 01:46Current

6.1Medium risk

Vulners AI Score6.1

CVSS 48.7

EPSS0.0089

SSVC