Lucene search

K
osvGoogleOSV:CVE-2022-3054
HistorySep 26, 2022 - 4:15 p.m.

CVE-2022-3054

2022-09-2616:15:12
Google
osv.dev
5
google chrome
devtools
insufficient policy enforcement
heap corruption
crafted html page
remote attacker
cve-2022-3054

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

8.9

Confidence

High

EPSS

0.002

Percentile

59.7%

Insufficient policy enforcement in DevTools in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

8.9

Confidence

High

EPSS

0.002

Percentile

59.7%