Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-3656HistoryNov 01, 2022 - 11:15 p.m.
CVE-2022-3656
2022-11-0123:15:18
Debian Security Bug Tracker
security-tracker.debian.org
29
google chrome
data validation
file system
bypass
remote attacker
html page
security severity
medium
cve-2022-3656
unix
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
51.5%
Insufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Medium)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | chromium | < 107.0.5304.68-1 | chromium_107.0.5304.68-1_all.deb |
| Debian | 11 | all | chromium | < 107.0.5304.68-1~deb11u1 | chromium_107.0.5304.68-1~deb11u1_all.deb |
| Debian | 999 | all | chromium | < 107.0.5304.68-1 | chromium_107.0.5304.68-1_all.deb |
| Debian | 13 | all | chromium | < 107.0.5304.68-1 | chromium_107.0.5304.68-1_all.deb |
Related
thn
thn
veracode
veracode
Information Disclosure
2022-11-17 00:57:20
nvd
nvd
CVE-2022-3656
2022-11-01 23:15:18
osv
osv
nodejs-electron-21.2.2-1.1 on GA media
2024-06-15 00:00:00
CVE-2022-3656
2022-11-01 23:15:18
chromedriver-107.0.5304.87-1.1 on GA media
2024-06-15 00:00:00
ubuntucve
ubuntucve
CVE-2022-3656
2022-11-01 00:00:00
prion
prion
Input validation
2022-11-01 23:15:00
cvelist
cvelist
CVE-2022-3656
2022-11-01 00:00:00
githubexploit
githubexploit
Exploit for Improper Input Validation in Google Chrome
2023-01-13 03:26:14
mscve
mscve
Chromium: CVE-2022-3656 Insufficient data validation in File System
2022-10-27 18:05:52
impervablog
impervablog
cve
cve
CVE-2022-3656
2022-11-01 23:15:18
cnvd
cnvd
Google Chrome Security Bypass Vulnerability (CNVD-2022-85084)
2022-10-27 00:00:00
hivepro
hivepro
Actors, Threats and Vulnerabilities 16 January 2023 – 22 January 2023
2023-01-25 03:14:57
nessus
nessus
Microsoft Edge (Chromium) < 107.0.1418.24 Multiple Vulnerabilities
2022-10-27 00:00:00
Google Chrome < 107.0.5304.62 Multiple Vulnerabilities
2022-10-25 00:00:00
Debian DSA-5261-1 : chromium - security update
2022-10-27 00:00:00
openvas
openvas
Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Nov 2022)
2022-11-10 00:00:00
Mageia: Security Advisory (MGASA-2022-0419)
2022-11-14 00:00:00
kaspersky
kaspersky
KLA20019 Multiple vulnerabilities in Microsoft Browser
2022-10-27 00:00:00
KLA20017 Multiple vulnerabilities in Google Chrome
2022-10-25 00:00:00
debian
debian
[SECURITY] [DSA 5261-1] chromium security update
2022-10-26 18:26:49
freebsd
freebsd
chromium -- multiple vulnerabilities
2022-10-25 00:00:00
suse
suse
Security update for chromium (important)
2022-10-31 00:00:00
Security update for chromium (important)
2022-10-31 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2022-11-13 05:25:20
chrome
chrome
Stable Channel Update for Desktop
2022-10-25 00:00:00
altlinux
altlinux
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
51.5%
Related for DEBIANCVE:CVE-2022-3656