Detections
Analytics

CVE-2022-4190

high

Description

Insufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Medium)

References

https://security.gentoo.org/glsa/202311-11

https://security.gentoo.org/glsa/202305-10

https://crbug.com/1378997

https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html

Details

Source: Mitre, NVD

Published: 2022-11-30

Updated: 2023-11-25

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00044

OSZAR »