DeutschShown in its original language — a full translation is planned for a future version.
Google Chrome: Mehrere Schwachstellen
view advisory published 2022-11-29
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen.
01
describes (23)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-4955US | medium6.5 | — | ||
Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass file access res… | ||||
| CVE-2022-4195US | medium4.3 | — | ||
Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing warnings via a malicious file. (Chromium… | ||||
| CVE-2022-4194US | high8.8 | — | ||
Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security… | ||||
| CVE-2022-4193US | high8.8 | — | ||
Insufficient policy enforcement in File System API in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Ch… | ||||
| CVE-2022-4192US | high8.8 | — | ||
Use after free in Live Caption in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit he… | ||||
| CVE-2022-4191US | high8.8 | — | ||
Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap co… | ||||
| CVE-2022-4190US | high8.8 | — | ||
Insufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium se… | ||||
| CVE-2022-4189US | medium4.3 | — | ||
Insufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass navigation r… | ||||
| CVE-2022-4188US | medium4.3 | — | ||
Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page… | ||||
| CVE-2022-4187US | medium6.5 | — | ||
Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 108.0.5359.71 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.… | ||||
| CVE-2022-4186US | medium4.3 | — | ||
Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass… | ||||
| CVE-2022-4185US | medium4.3 | — | ||
Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to spoof the contents of the modal dialogue via a crafted HTML p… | ||||
| CVE-2022-4184US | medium4.3 | — | ||
Insufficient policy enforcement in Autofill in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass autofill restrictions via a crafted HTML page. (Chromium sec… | ||||
| CVE-2022-4183US | medium4.3 | — | ||
Insufficient policy enforcement in Popup Blocker in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chrom… | ||||
| CVE-2022-4182US | medium4.3 | — | ||
Inappropriate implementation in Fenced Frames in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass fenced frame restrictions via a crafted HTML page. (Chromi… | ||||
| CVE-2022-4181US | high8.8 | — | ||
Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severit… | ||||
| CVE-2022-4180US | high8.8 | — | ||
Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via… | ||||
| CVE-2022-4179US | high8.8 | — | ||
Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via… | ||||
| CVE-2022-4178US | high8.8 | — | ||
Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a craft… | ||||
| CVE-2022-4177US | high8.8 | — | ||
Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install an extension to potentially exploit heap corruption via a c… | ||||
showing 20 of 23
02
references
External citations — patches, advisories, analysis.
- Fedora Security Advisory FEDORA-EPEL-2023-B300E89045 vom 2023-12-22external
- Google Chrome Stable Channel Release vom 2022-11-29external
- Release notes for Microsoft Edge Security Updates vom 2022-11-29external
- Debian Security Advisory DSA-5293 vom 2022-12-03external
- Gentoo Linux Security Advisory GLSA-202311-11 vom 2023-11-25external
- WID-SEC-W-2022-2202 - CSAF Versionself
- WID-SEC-2022-2202 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan