Lucene search
Ubuntu.comUB:CVE-2022-1309HistoryJul 25, 2022 - 12:00 a.m.
CVE-2022-1309
2022-07-2500:00:00
ubuntu.com
ubuntu.com
17
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
65.4%
Insufficient policy enforcement in developer tools in Google Chrome prior
to 100.0.4896.88 allowed a remote attacker to potentially perform a sandbox
escape via a crafted HTML page.
Notes
| Author | Note |
|---|---|
| alexmurray | The Debian chromium source package is called chromium-browser in Ubuntu |
| mdeslaur | starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | chromium-browser | < 100.0.4896.127-0ubuntu0.18.04.1 | UNKNOWN |
Related
veracode
veracode
Insufficient Policy Enforcement
2022-04-17 09:57:54
cvelist
cvelist
CVE-2022-1309
2022-07-25 13:40:26
debiancve
debiancve
CVE-2022-1309
2022-07-25 14:15:10
cve
cve
CVE-2022-1309
2022-07-25 14:15:10
prion
prion
Design/Logic Flaw
2022-07-25 14:15:00
osv
osv
CVE-2022-1309
2022-07-25 14:15:10
chromium - security update
2022-04-13 00:00:00
nvd
nvd
CVE-2022-1309
2022-07-25 14:15:10
mscve
mscve
Chromium: CVE-2022-1309 Insufficient policy enforcement in developer tools
2022-04-15 07:00:00
nessus
nessus
FreeBSD : Chromium -- mulitple vulnerabilities (b582a85a-ba4a-11ec-8d1e-3065ec8fd3ec)
2022-04-12 00:00:00
Debian DSA-5120-1 : chromium - security update
2022-04-19 00:00:00
Google Chrome < 100.0.4896.88 Multiple Vulnerabilities
2022-04-11 00:00:00
debian
debian
[SECURITY] [DSA 5120-1] chromium security update
2022-04-13 06:27:12
chrome
chrome
Stable Channel Update for Desktop
2022-04-11 00:00:00
kaspersky
kaspersky
KLA12500 Multiple vulnerabilities in Google Chrome
2022-04-11 00:00:00
KLA12513 Multiple vulnerabilities in Microsoft Browser
2022-04-15 00:00:00
freebsd
freebsd
Chromium -- mulitple vulnerabilities
2022-04-11 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5120-1)
2022-04-20 00:00:00
Mageia: Security Advisory (MGASA-2022-0146)
2022-04-20 00:00:00
Fedora: Security Advisory for chromium (FEDORA-2022-0f14e2308e)
2022-05-04 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerability
2022-04-18 23:00:03
fedora
fedora
[SECURITY] Fedora 36 Update: chromium-100.0.4896.127-1.fc36
2022-05-07 05:11:33
[SECURITY] Fedora 35 Update: chromium-100.0.4896.127-1.fc35
2022-05-03 14:55:22
[SECURITY] Fedora 34 Update: chromium-100.0.4896.127-1.fc34
2022-05-03 14:58:26
suse
suse
Security update for chromium (important)
2022-04-13 00:00:00
gentoo
gentoo
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
65.4%
Related for UB:CVE-2022-1309