Lucene search
Ubuntu.comUB:CVE-2022-4025HistoryJan 02, 2023 - 12:00 a.m.
CVE-2022-4025
2023-01-0200:00:00
ubuntu.com
ubuntu.com
22
google chrome
insecure paint
data leak
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
47.3%
Inappropriate implementation in Paint in Google Chrome prior to
98.0.4758.80 allowed a remote attacker to leak cross-origin data outside an
iframe via a crafted HTML page. (Chrome security severity: Low)
Notes
| Author | Note |
|---|---|
| alexmurray | The Debian chromium source package is called chromium-browser in Ubuntu |
| mdeslaur | starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | chromium-browser | < 99.0.4844.51-0ubuntu0.18.04.1 | UNKNOWN |
Related
veracode
veracode
Information Disclosure
2023-03-13 05:45:06
nvd
nvd
CVE-2022-4025
2023-01-02 23:15:10
prion
prion
Design/Logic Flaw
2023-01-02 23:15:00
cvelist
cvelist
CVE-2022-4025
2023-01-02 00:00:00
debiancve
debiancve
CVE-2022-4025
2023-01-02 23:15:10
osv
osv
CVE-2022-4025
2023-01-02 23:15:10
chromium - security update
2022-02-07 00:00:00
kaspersky
kaspersky
KLA20201 DoS vulnerability in Opera
2022-02-16 00:00:00
KLA12438 Multiple vulnerabilities in Google Chrome
2022-02-01 00:00:00
cve
cve
CVE-2022-4025
2023-01-02 23:15:10
openvas
openvas
Debian: Security Advisory (DSA-5068-1)
2022-02-09 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2022-02-01 00:00:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
47.3%
Related for UB:CVE-2022-4025