IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
6.5Mittel KEV

CVE-2022-2856Google Chromium Intents Insufficient Input Validation Vulnerability

Google Chrome; google chrome; fedoraproject fedora Veröffentlicht: (vor 4 Jahren)

Bekannt ausgenutzt — Google Chromium Intents Insufficient Input Validation Vulnerability

CISA hat am 18.08.2022 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 08.09.2022.

Erforderliche Maßnahme: Apply updates per vendor instructions. https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html; https://nvd.nist.gov/vuln/detail/CVE-2022-2856

Beschreibung

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.

Schwachstellentyp (CWE): CWE-20

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
fedoraproject fedora 37
Google Chrome unspecified – < 104.0.5112.101

Referenzen und Patches

CPE-Treffer (NVD) (3)
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* < 104.0.5112.101
  • cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* < 104.0.5112.102

Neue CVEs im selben Produkt — Google Chrome

8.8Hoch
CVE-2026-119270
Google Chrome

Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Hoch
CVE-2026-119271
Google Chrome

Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

4.3Mittel
CVE-2026-119272
Google Chrome

Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

9.6Kritisch
CVE-2026-119263
Google Chrome

Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Hoch
CVE-2026-119264
Google Chrome

Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Hoch
CVE-2026-119265
Google Chrome

Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)