Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2022-0117 Details

Policy bypass in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.5 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html	CVE	Release NotesVendor Advisory
https://crbug.com/1115847	CVE	ExploitIssue TrackingPatchVendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/	CVE
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/	CVE
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/	CVE
https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html	[email protected]	Release NotesVendor Advisory
https://crbug.com/1115847	[email protected]	ExploitIssue TrackingPatchVendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/	[email protected]
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/	[email protected]
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/	[email protected]

CWE-ID	CWE Name	Source
CWE-863	Incorrect Authorization	[email protected]

Product	Versions
google chrome	< 97.0.4692.71
CPE cpe:2.3:a:google:chrome:::::::: Remediation No remediation found in references.
fedoraproject fedora	34 35 36
CPE cpe:2.3:o:fedoraproject:fedora:34:::::::* cpe:2.3:o:fedoraproject:fedora:35:::::::* cpe:2.3:o:fedoraproject:fedora:36:::::::* Remediation No remediation found in references.

11 change records found show changes

QUICK INFO