← Back

CVE-2022-2856

nvd nist
Published: Sep 26, 2022Modified: Jun 17, 2026CISA KEV

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.

Affected (3)

Google
1 product
Chrome
Fedoraproject
1 product
Fedora
Configuration A
1 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Chrome
Before 104.0.5112.101
Running on/withPlatform Versions
Apple
Macos
All versions
Google
Android
All versions
Linux
Linux Kernel
All versions
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Fedora
Version 37
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Chrome
Before 104.0.5112.102
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (7)

Source: chrome-cve-admin@google.com
PatchRelease NotesVendor Advisory
Source: chrome-cve-admin@google.com
ExploitIssue TrackingMailing ListVendor Advisory
Source: chrome-cve-admin@google.com
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
PatchRelease NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue TrackingMailing ListVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.