CVE-2022-2856

Published on: Not Yet Published

Last Modified on: 10/27/2022 07:01:00 PM UTC

CVE-2022-2856

Source: Mitre Source: NIST CVE.ORG Print: PDF PDF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Certain versions of Fedora from Fedoraproject contain the following vulnerability:

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.

  • CVE-2022-2856 has been assigned by URL Logo [email protected] to track the vulnerability - currently rated as MEDIUM severity.
  • Affected Vendor/Software: URL Logo Google - Chrome version < 104.0.5112.101

CVSS3 Score: 6.5 - MEDIUM

Attack
Vector ⓘ		 Attack
Complexity		 Privileges
Required		 User
Interaction
NETWORK LOW NONE REQUIRED
Scope Confidentiality
Impact		 Integrity
Impact		 Availability
Impact
UNCHANGED NONE HIGH NONE

CVE References

Description Tags ⓘ Link
Chrome Releases: Stable Channel Update for Desktop chromereleases.googleblog.com
text/html
 URL Logo MISC chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html
[SECURITY] Fedora 37 Update: chromium-105.0.5195.125-2.fc37 - package-announce - Fedora Mailing-Lists lists.fedoraproject.org
text/html
 URL Logo FEDORA FEDORA-2022-3f28aa88cf
1345630 - chromium - An open-source project to help move the web forward. - Monorail crbug.com
text/html
 URL Logo MISC crbug.com/1345630
By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].

Related QID Numbers

  • 180946 Debian Security Update for chromium (DSA 5212-1)
  • 283172 Fedora Security Update for chromium (FEDORA-2022-3ca063941b)
  • 283173 Fedora Security Update for chromium (FEDORA-2022-b49c9bc07a)
  • 376828 Google Chrome Prior to 104.0.5112.101 Multiple Vulnerabilities
  • 376829 Microsoft Edge Based on Chromium Prior to 104.0.1293.60 Multiple Vulnerabilities
  • 690923 Free Berkeley Software Distribution (FreeBSD) Security Update for chromium (f12368a8-1e05-11ed-a1ef-3065ec8fd3ec)
  • 710606 Gentoo Linux Chromium, Google Chrome, Microsoft Edge Multiple Vulnerabilities (GLSA 202208-35)
  • 752520 OpenSUSE Security Update for opera (openSUSE-SU-2022:10108-1)
  • 752521 OpenSUSE Security Update for opera (openSUSE-SU-2022:10109-1)

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
Operating
System		FedoraprojectFedora37AllAllAll
Operating
System		GoogleAndroid-AllAllAll
ApplicationGoogleChromeAllAllAllAll
  • cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:-:*:*:*:*:*:*:*:
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*:

Social Mentions

Source Title Posted (UTC)
Twitter Icon @revskills Google is aware that an exploit for CVE-2022-2856 exists in the wild. chromereleases.googleblog.com/2022/08/stable… 2022-08-16 21:19:35
Twitter Icon @inthewildio CVE-2022-2856 is getting exploited #inthewild. Find out more at inthewild.io/vuln/CVE-2022-… 2022-08-16 22:03:53
Twitter Icon @ohhara_shiojiri こっちは既にPoC有りか > "Google is aware that an exploit for CVE-2022-2856 exists in the wild." 2022-08-17 00:05:57
Twitter Icon @the_yellow_fall Chrome releases security update to fix 0-day CVE-2022-2856 vulnerability securityonline.info/chrome-release… #opensource #infosec #security #pentesting 2022-08-17 01:29:42
Twitter Icon @AcooEdi Chrome releases security update to fix 0-day CVE-2022-2856 vulnerability dlvr.it/SWlnGZ via securityonline 2022-08-17 01:33:02
Twitter Icon @Dinosn Chrome releases security update to fix 0-day CVE-2022-2856 vulnerability securityonline.info/chrome-release… 2022-08-17 05:04:40
Twitter Icon @d34dr4bbit Chrome releases security update to fix 0-day CVE-2022-2856 vulnerability aeternusmalus.wordpress.com/2022/08/17/chr… 2022-08-17 11:12:14
Twitter Icon @TreyClark3rd ⁦@Google⁩ is rolling out patches for #Chrome to contain a #zeroday flaw tracked as CVE-2022-2856. Patch away.… twitter.com/i/web/status/1… 2022-08-17 12:14:12
Twitter Icon @moton Chrome releases security update to fix 0-day CVE-2022-2856 vulnerability - securityonline.info/chrome-release… 2022-08-17 12:25:03
Twitter Icon @autumn_good_35 『Google is aware that an exploit for CVE-2022-2856 exists in the wild.』 Chrome Releases: Stable Channel Update for… twitter.com/i/web/status/1… 2022-08-17 12:51:19
Twitter Icon @ryanaraine New Chrome 0day "Google is aware that an exploit for CVE-2022-2856 exists in the wild." Story securityweek.com/google-patches… 2022-08-17 13:13:15
Twitter Icon @DennisF One of these flaws (CVE-2022-2856) was discovered by @google's Threat Analysis Group, and there's an exploit availa… twitter.com/i/web/status/1… 2022-08-17 13:28:57
Twitter Icon @kr_simon_choi Google is aware that an exploit for CVE-2022-2856 exists in the wild. 2022-08-17 13:44:33
Twitter Icon @MrsYisWhy SecurityWeek: RT @ryanaraine: New Chrome 0day "Google is aware that an exploit for CVE-2022-2856 exists in the wil… twitter.com/i/web/status/1… 2022-08-17 14:54:38
Twitter Icon @DigitalGuardian Heads up: Time to update Chrome if you haven't yet to fix a new zero day: CVE-2022-2856: buff.ly/3dqY4Qq https://t.co/sIgXe5bv2q 2022-08-17 15:54:01
Twitter Icon @ipssignatures The vuln CVE-2022-2856 has a tweet created 0 days ago and retweeted 36 times. twitter.com/ryanaraine/sta… #pow1rtrtwwcve 2022-08-17 16:06:00
Twitter Icon @ashl3y_shen The Chrome 0day (CVE-2022-2856) that me and @0xbadcafe1 found ITW is patched in the latest release. Update your Chr… twitter.com/i/web/status/1… 2022-08-17 18:16:29
Twitter Icon @Har_sia CVE-2022-2856 har-sia.info/CVE-2022-2856.… #HarsiaInfo 2022-08-17 18:23:02
Twitter Icon @AquiaSolutions Google Chrome Zero-Day Found Exploited in the Wild: The high-severity security vulnerability (CVE-2022-2856) is due… twitter.com/i/web/status/1… 2022-08-17 19:17:06
Twitter Icon @cipherstorm Google Chrome Zero-Day Found Exploited in the Wild: The high-severity security vulnerability (CVE-2022-2856) is due… twitter.com/i/web/status/1… 2022-08-17 19:17:11
Twitter Icon @shah_sheikh Google Chrome Zero-Day Found Exploited in the Wild: The high-severity security vulnerability (CVE-2022-2856) is due… twitter.com/i/web/status/1… 2022-08-17 19:22:36
Twitter Icon @SpywareSpeaks Google Chrome Zero-Day Found Exploited in the Wild. The high-severity security vulnerability (CVE-2022-2856) is due… twitter.com/i/web/status/1… 2022-08-17 19:46:04
Twitter Icon @dekogen3057 @Slickjilly After you update your Chrome browser type this in to Google and you'll find the info you're looking for: CVE-2022-2856 2022-08-17 20:17:11
Twitter Icon @wdormann CVE-2022-2856 found exploited in the wild as an 0day in Google Chrome. twitter.com/DarkReading/st… 2022-08-17 20:25:09
Twitter Icon @PatrizioBytes Microsoft Edge released 104.0.1293.60 Stable Channel for Android platform with CVE-2022-2856. We are aware that thi… twitter.com/i/web/status/1… 2022-08-17 20:42:31
Twitter Icon @ipssignatures The vuln CVE-2022-2856 has a tweet created 0 days ago and retweeted 20 times. twitter.com/ashl3y_shen/st… #pow1rtrtwwcve 2022-08-17 22:06:00
Twitter Icon @maddiestone 3 in-the-wild 0-days patched in the last two days: * CVE-2022-2856 in Chrome discovered by @ashl3y_shen &… twitter.com/i/web/status/1… 2022-08-17 23:31:16
Twitter Icon @jingbay Googleがあちらの水曜(今日)にChromeで実際に攻撃に利用されている脆弱性を発見したとして修正をリリース。CVE-2022-2856はIntentに対する入力のvalidationが不十分であったというもの。現在、これ以上… twitter.com/i/web/status/1… 2022-08-17 23:39:04
Twitter Icon @tayvano_ 2022's 5th in-the wild Chrome zero-day is here. CVE-2022-2856: Insufficient validation of untrusted input in Inten… twitter.com/i/web/status/1… 2022-08-18 00:41:06
Twitter Icon @avoidthehack Update @Chrome now to patch actively exploited zero-day CVE-2022-2856 - affects Chrome/Chromium passing data to ot… twitter.com/i/web/status/1… 2022-08-18 00:44:56
Twitter Icon @ChainCatcher_ ?资讯 @googlechrome浏览器发布版本更新，以修复新的零时差漏洞，该漏洞代号为CVE-2022-2856，是由于浏览器未「充分验证不受信任的输入」。 Web3钱包安全机构@wallet_guard表示，所有使用Chr… twitter.com/i/web/status/1… 2022-08-18 02:02:01
Twitter Icon @ipssignatures The vuln CVE-2022-2856 has a tweet created 0 days ago and retweeted 12 times. twitter.com/maddiestone/st… #pow1rtrtwwcve 2022-08-18 02:06:00
Twitter Icon @_therealmark_ Update Chrome now to patch actively exploited zero-day CVE-2022-2856 is a fix for "insufficient validation of unt… twitter.com/i/web/status/1… 2022-08-18 03:01:01
Twitter Icon @Shaweeen Chrome 浏览器发布 104.0.5112.101（Mac 和 Linux）和 104.0.5112.102（Windows）版本更新，以修复新的零日漏洞，该漏洞代号为 CVE-2022-2856，是由于浏览器未「充分验证不受… twitter.com/i/web/status/1… 2022-08-18 03:05:05
Twitter Icon @BitCheckerCN #币圈安全 #Chrome浏览器 发布104.0.5112.101（Mac 和 Linux）和 104.0.5112.102（Windows）版本更新，以修复新的零时差漏洞，该漏洞代号为 CVE-2022-2856，是由于浏览器… twitter.com/i/web/status/1… 2022-08-18 03:05:06
Twitter Icon @TechTalkThai Google แพตช์อุดช่องโหว่ Zero-day ให้ Chrome techtalkthai.com/google-fixed-z… 2022-08-18 04:29:42
Twitter Icon @lucasxtwt Google แพตช์อุดช่องโหว่ Zero-day ให้ Chrome techtalkthai.com/google-fixed-z… 2022-08-18 04:50:23
Twitter Icon @IM_23pds 3 in-the-wild 0-days patched in the last two days: * CVE-2022-2856 in Chrome discovered by @ashl3y_shen&… twitter.com/i/web/status/1… 2022-08-18 05:57:13
Twitter Icon @happygeek Here we go again, by me @Forbes: Google confirms 0day #5 of 2022 as the CVE-2022-2856 attacks begin. Here's what w… twitter.com/i/web/status/1… 2022-08-18 07:23:25
Twitter Icon @ForenzyN Zero-day vulnerability in #Google Chrome High-severity vulnerability in Google Chrome tracked as CVE-2022-2856, is… twitter.com/i/web/status/1… 2022-08-18 07:33:54
Twitter Icon @ohmohm Google แพตช์อุดช่องโหว่ Zero-day ให้ Chrome techtalkthai.com/google-fixed-z… . 2022-08-18 07:34:57
Twitter Icon @MachinaRecord ?アップルがmacOSおよびiOSの新たなゼロデイにパッチ（CVE-2022-32894他） ?Google、実際に悪用されるChromeのゼロデイへのパッチをリリース（CVE-2022-2856他） ⚠️CPUの脆弱性ÆPI… twitter.com/i/web/status/1… 2022-08-18 08:16:09
Twitter Icon @helpnetsecurity Apple fixes exploited zero-days: Update your devices! (CVE-2022-32894, CVE-2022-32893) - helpnetsecurity.com/2022/08/18/cve… -… twitter.com/i/web/status/1… 2022-08-18 09:56:56
Twitter Icon @blu3cloak Apple fixes exploited zero-days: Update your devices! (CVE-2022-32894, CVE-2022-32893) helpnetsecurity.com/2022/08/18/cve… 2022-08-18 10:51:08
Twitter Icon @tony_cleal helpnetsecurity.com/2022/08/18/cve… 2022-08-18 10:53:59
Twitter Icon @netsecu helpnetsecurity.com/2022/08/18/cve… Apple fixes exploited zero-days: Update your devices! (CVE-2022-32894, CVE-2022-32893) #cybersecurity 2022-08-18 10:55:05
Twitter Icon @OSINT_info helpnetsecurity.com/2022/08/18/cve… Apple fixes exploited zero-days: Update your devices! (CVE-2022-32894, CVE-2022-32893) #cybersecurity 2022-08-18 11:04:40
Twitter Icon @ruinabadguysday Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/ruinabadguysda… 2022-08-18 11:12:17
Twitter Icon @afterdawnfi Google paikkasi Chrome-selaimen nollapäivähaavoittuvuuden - päivitä selain fin.afterdawn.com/uutiset/artikk… 2022-08-18 11:40:03
Twitter Icon @Alexsander71 CVE-2022-2856, the issue is a case of insufficient validation of untrusted input in Intents. The tech giant has ref… twitter.com/i/web/status/1… 2022-08-18 11:46:02
Twitter Icon @SecurityNewsbot #Apple fixes exploited zero-days: #Update your devices! (CVE-2022-32894, CVE-2022-32893) helpnetsecurity.com/2022/08/18/cve… #HelpNetSecurity 2022-08-18 13:30:12
Twitter Icon @qualys #Qualys Threat Protection - Google Chrome Zero-Day Insufficient Input Validation Vulnerability (CVE-2022-2856)… twitter.com/i/web/status/1… 2022-08-18 14:30:09
Twitter Icon @Har_sia CVE-2022-2856 har-sia.info/CVE-2022-2856.… #HarsiaInfo 2022-08-18 15:02:16
Twitter Icon @hosselot Google Chrome (In-The-Wild) Zero day (CVE-2022-2856) fix. If an intent contains any extras or a data URI and it tar… twitter.com/i/web/status/1… 2022-08-18 15:06:37
Twitter Icon @sofarinimout Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/v/19037?s=tnp 2022-08-18 15:23:00
Twitter Icon @crypto_crew Fellow @Crypto_Crew members, due to security reasons (zero-day exploit CVE-2022-2856) we'd like to advice you to up… twitter.com/i/web/status/1… 2022-08-18 15:43:00
Twitter Icon @antivirusfrance Vulnérabilité dans #Microsoft #Edge CVE-2022-2856 – 104.0.1293.60, #Apple antivirus-france.com/vulnerabilite-… 2022-08-18 16:53:52
Twitter Icon @AZILINONS Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:46
Twitter Icon @abiodunfawole Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:47
Twitter Icon @Autoloansforeve Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:47
Twitter Icon @VexDoesRE Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:48
Twitter Icon @Sixto_Torres Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:48
Twitter Icon @crossmediapubli Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:48
Twitter Icon @iamtokstesla Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:49
Twitter Icon @gvertlieb Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:49
Twitter Icon @digitalNFTarts Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:49
Twitter Icon @FundRaphael Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:50
Twitter Icon @aleubdecap Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:50
Twitter Icon @jmattos2001 Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:51
Twitter Icon @HRTechOnline Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:51
Twitter Icon @paramountnashik Top story by PARENTNashik Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…… twitter.com/i/web/status/1… 2022-08-18 17:28:51
Twitter Icon @icjr Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:52
Twitter Icon @GenerousFeed Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:52
Twitter Icon @dcgalex Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:53
Twitter Icon @CarsForNoCredit Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:53
Twitter Icon @HRTechMagazine Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:54
Twitter Icon @robertopuyo Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:55
Twitter Icon @derblauweisse Forbes NEWTop story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see… twitter.com/i/web/status/1… 2022-08-18 17:28:55
Twitter Icon @PabloALondono Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:55
Twitter Icon @vkchaudhary19 Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/media/forbes/a… 2022-08-18 17:28:56
Twitter Icon @WorkMoneyFun Top story: Google Confirms Chrome Zero-Day #5 As CVE-2022-2856 Attacks Begin forbes.com/sites/daveywin…, see more tweetedtimes.com/v/23143?s=tnp 2022-08-18 17:33:13
Twitter Icon @Har_sia CVE-2022-2856 har-sia.info/CVE-2022-2856.… #HarsiaInfo 2022-08-18 18:24:03
Reddit Logo Icon /r/k12cybersecurity MS-ISAC CYBERSECURITY ADVISORY - Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution 2022-08-17 12:45:09
Reddit Logo Icon /r/Hacks_And_Exploits Update Chrome Browser Now to Patch New Actively Exploited Zero-Day Flaw 2022-11-28 09:06:38
Reddit Logo Icon /r/Tech_Hackers_And_More Ninth Actively Exploited Chrome Zero-day Spotted in the Wild 2022-12-07 12:50:46
© CVE.report 2023 Twitter Nitter Twitter Viewer |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report