Lucene search
Ubuntu.comUB:CVE-2022-2622HistoryAug 12, 2022 - 12:00 a.m.
CVE-2022-2622
2022-08-1200:00:00
ubuntu.com
ubuntu.com
13
cve-2022-2622; insufficient validation; google chrome; windows; safe browsing; remote attacker; download restrictions; crafted file; debian; ubuntu 19.10; chromium snap; unix
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
51.1%
Insufficient validation of untrusted input in Safe Browsing in Google
Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to
bypass download restrictions via a crafted file.
Notes
| Author | Note |
|---|---|
| alexmurray | The Debian chromium source package is called chromium-browser in Ubuntu |
| mdeslaur | starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | chromium-browser | < 104.0.5112.101-0ubuntu0.18.04.1 | UNKNOWN |
Related
prion
prion
Input validation
2022-08-12 20:15:00
veracode
veracode
Privilege Escalation
2022-08-11 11:43:23
mscve
mscve
nvd
nvd
CVE-2022-2622
2022-08-12 20:15:09
cvelist
cvelist
CVE-2022-2622
2022-08-12 19:37:44
osv
osv
CVE-2022-2622
2022-08-12 20:15:09
chromedriver-104.0.5112.79-1.1 on GA media
2024-06-15 00:00:00
chromium - security update
2022-08-07 00:00:00
debiancve
debiancve
CVE-2022-2622
2022-08-12 20:15:09
cve
cve
CVE-2022-2622
2022-08-12 20:15:09
nessus
nessus
Microsoft Edge (Chromium) < 104.0.1293.47 Multiple Vulnerabilities
2022-08-06 00:00:00
Debian DSA-5201-1 : chromium - security update
2022-08-07 00:00:00
Google Chrome < 104.0.5112.79 Multiple Vulnerabilities
2022-08-02 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0277)
2022-08-08 00:00:00
openSUSE: Security Advisory for chromium (openSUSE-SU-2022:10086-1)
2024-03-04 00:00:00
Debian: Security Advisory (DSA-5201-1)
2022-08-08 00:00:00
debian
debian
[SECURITY] [DSA 5201-1] chromium security update
2022-08-07 08:50:50
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerability
2022-08-06 00:00:44
freebsd
freebsd
chromium -- multiple vulnerabilities
2022-08-02 00:00:00
kaspersky
kaspersky
KLA12601 Multiple vulnerabilities in Microsoft Browser
2022-08-05 00:00:00
KLA12600 Multiple vulnerabilities in Google Chrome
2022-08-02 00:00:00
suse
suse
Security update for chromium (important)
2022-08-12 00:00:00
Security update for chromium (important)
2022-08-16 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2022-08-02 00:00:00
gentoo
gentoo
Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities
2022-08-21 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: chromium-105.0.5195.125-2.fc35
2022-10-05 01:05:03
[SECURITY] Fedora 37 Update: chromium-105.0.5195.125-2.fc37
2022-10-03 00:22:01
[SECURITY] Fedora 36 Update: chromium-105.0.5195.125-2.fc36
2022-10-05 01:01:54
rapid7blog
rapid7blog
Patch Tuesday - August 2022
2022-08-09 19:34:51
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
51.1%
Related for UB:CVE-2022-2622