CVE-2022-3201
Summary
| CVE | CVE-2022-3201 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-09-26 16:15:00 UTC |
|---|
| Updated | 2023-11-25 11:15:00 UTC |
|---|
| Description | Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High) |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Debian -- Security Information -- DSA-5244-1 chromium |
MISC |
www.debian.org |
|
| [SECURITY] Fedora 37 Update: chromium-105.0.5195.125-2.fc37 - package-announce - Fedora Mailing-Lists |
MISC |
lists.fedoraproject.org |
|
| Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities (GLSA 202209-23) — Gentoo security |
MISC |
security.gentoo.org |
|
| Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities (GLSA 202210-16) — Gentoo security |
MISC |
security.gentoo.org |
|
| Chrome Releases: Stable Channel Update for Desktop |
MISC |
chromereleases.googleblog.com |
|
| Chrome Releases: Stable Channel Update for Desktop |
MISC |
chromereleases.googleblog.com |
|
| [SECURITY] Fedora 37 Update: chromium-105.0.5195.125-2.fc37 - package-announce - Fedora Mailing-Lists |
MISC |
lists.fedoraproject.org |
|
| QtWebEngine: Multiple Vulnerabilities (GLSA 202311-11) — Gentoo security |
|
security.gentoo.org |
|
| 1343104 -
chromium -
An open-source project to help move the web forward. -
Monorail |
MISC |
crbug.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 181059 Debian Security Update for chromium (DSA 5230-1)
- 181085 Debian Security Update for chromium (DSA 5244-1)
- 181992 Debian Security Update for chromium (CVE-2022-3201)
- 283172 Fedora Security Update for chromium (FEDORA-2022-3ca063941b)
- 283173 Fedora Security Update for chromium (FEDORA-2022-b49c9bc07a)
- 377591 Google Chrome Prior to 105.0.5195.125 Multiple Vulnerabilities
- 377610 Google Chrome Prior to 106.0.5249.61 Multiple Vulnerabilities
- 502596 Alpine Linux Security Update for qt5-qtwebengine
- 502933 Alpine Linux Security Update for qt5-qtwebengine
- 502936 Alpine Linux Security Update for qt5-qtwebengine
- 503232 Alpine Linux Security Update for qt5-qtwebengine
- 505809 Alpine Linux Security Update for qt5-qtwebengine
- 506189 Alpine Linux Security Update for qt5-qtwebengine
- 690939 Free Berkeley Software Distribution (FreeBSD) Security Update for chromium (b59847e0-346d-11ed-8fe9-3065ec8fd3ec)
- 690946 Free Berkeley Software Distribution (FreeBSD) Security Update for chromium (18529cb0-3e9c-11ed-9bc7-3065ec8fd3ec)
- 710634 Gentoo Linux Chromium, Google Chrome, Microsoft Edge Multiple Vulnerabilities (GLSA 202209-23)
- 710646 Gentoo Linux Chromium, Google Chrome, Microsoft Edge Multiple Vulnerabilities (GLSA 202210-16)
- 710797 Gentoo Linux QtWebEngine Multiple Vulnerabilities (GLSA 202311-11)
- 752624 OpenSUSE Security Update for opera (openSUSE-SU-2022:10130-1)
- 752631 OpenSUSE Security Update for opera (openSUSE-SU-2022:10131-1)
- 754103 OpenSUSE Security Update for opera (openSUSE-SU-2023:0115-1)
