Vulnerability of browser extensions in Google Chrome and Microsoft Edge, allowing attackers to gain unauthorized access to protected information

Chrome and Edge extensions have input validation flaws enabling access to protected data.

Reporter	Title	Published	Views	Family All 55
ALT Linux	Security fix for the ALT Linux 10 package yandex-browser-stable version 23.1.2.1033-alt1	4 Apr 202300:00	–	altlinux
ATTACKERKB	CVE-2022-3661	1 Nov 202223:15	–	attackerkb
AstraLinux	Astra Linux - уязвимость в chromium	20 May 202605:53	–	astralinux
FreeBSD	chromium -- multiple vulnerabilities	25 Oct 202200:00	–	freebsd
Circl	CVE-2022-3661	2 Nov 202201:19	–	circl
CNNVD	Google Chrome 输入验证错误漏洞	25 Oct 202200:00	–	cnnvd
CNVD	Google Chrome Security Bypass Vulnerability (CNVD-2022-85089)	27 Oct 202200:00	–	cnvd
CVE	CVE-2022-3661	1 Nov 202200:00	–	cve
Cvelist	CVE-2022-3661	1 Nov 202200:00	–	cvelist
Debian	[SECURITY] [DSA 5261-1] chromium security update	26 Oct 202218:26	–	debian

Vulners

Node

google google_chromeRange<107.0.5304.68

google google_chromeRange<107.0.5304.62

Source	Link
chromereleases	www.chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-3661
suse	www.suse.com/security/cve/CVE-2022-3661.html
crbug	www.crbug.com/1350111
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3661
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.6/
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20221220SE16
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2022-1221SE17MD
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0131SE47MD
web	www.web.nvd.nist.gov/view/vuln/detail

28 Feb 2023 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 27.1

CVSS 37.4

EPSS0.00108