China National Vulnerability DatabaseCNVD-2022-87929Google Chrome Permissions API Memory Misreference Vulnerability
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Google Chrome is a Web browser from Google, Inc. A memory misquoting vulnerability exists in versions of Google Chrome prior to 106.0.5249.119. The vulnerability stems from post-release use of the Permissions API, which can be exploited by remote attackers to trick users into engaging in specific UI gestures to launch an attack via a constructed HTML page using heap corruption.
| CPE | Name | Operator | Version |
|---|---|---|---|
| google chrome <106. | eq | 0.5249.119 |
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H