Lucene search
HistoryAug 25, 2023 - 3:15 p.m.
CVE-2022-4452
data validation
chrome
cve-2022-4452
object corruption
html page
remote attacker
google chrome
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.5
Confidence
High
EPSS
0.002
Percentile
52.1%
Insufficient data validation in crosvm in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)
Affected configurations
Node
googlechromeRange<107.0.5304.62
Related
cve
cve
CVE-2022-4452
2023-08-25 15:15:08
osv
osv
Possible Vulnerability: Invalid check for Virtio descriptors
2023-03-01 00:00:00
prion
prion
Input validation
2023-08-25 15:15:00
cvelist
cvelist
CVE-2022-4452
2023-08-25 14:44:44
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.5
Confidence
High
EPSS
0.002
Percentile
52.1%
Related for NVD:CVE-2022-4452