The vulnerability of the Trusted Types component in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

🗓️ 05 May 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Trusted Types flaw in Edge and Chrome enables remote disclosure due to weak input validation.

Reporter	Title	Published	Views	Family All 48
FreeBSD	chromium -- multiple vulnerabilities	26 Apr 202200:00	–	freebsd
ATTACKERKB	CVE-2022-1494	26 Jul 202222:15	–	attackerkb
AlpineLinux	CVE-2022-1494	26 Jul 202221:34	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в chromium	20 May 202605:53	–	astralinux
Circl	CVE-2022-1494	27 Jul 202202:35	–	circl
CNNVD	Google Chromium 跨站脚本漏洞	27 Apr 202200:00	–	cnnvd
CVE	CVE-2022-1494	26 Jul 202221:34	–	cve
Cvelist	CVE-2022-1494	26 Jul 202221:34	–	cvelist
Debian	[SECURITY] [DSA 5125-1] chromium security update	27 Apr 202218:00	–	debian
Debian CVE	CVE-2022-1494	26 Jul 202221:34	–	debiancve

Vulners

Node

google google_chromeRange<101.0.4951.41

OR

microsoft microsoft_edgeRange<101.0.1210.32

Source	Link
chromereleases	www.chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1494
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-1494
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.5/
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
crbug	www.crbug.com/1298122

13 Sep 2024 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 35.4

CVSS 26.4

EPSS0.00397

trusted types flaw edge browser chrome browser remote disclosure weak input validation