CVE-2022-4190 | BDVDB-2026-189521 Detail

GoogleChrome

Description#

Insufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Medium)

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html
https://crbug.com/1378997
https://security.gentoo.org/glsa/202305-10
https://security.gentoo.org/glsa/202311-11

Exploit#

No public exploit known

History#

Version 12022-11-29Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.