Lucene search
HistoryNov 01, 2022 - 11:15 p.m.
CVE-2022-3661
data validation
google chrome
extensions
remote attacker
cross-origin data
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
41.3%
Insufficient data validation in Extensions in Google Chrome prior to 107.0.5304.62 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome extension. (Chromium security severity: Low)
Affected configurations
Node
googlechromeRange<107.0.5304.62
Related
cve
cve
CVE-2022-3661
2022-11-01 23:15:19
cnvd
cnvd
Google Chrome Security Bypass Vulnerability (CNVD-2022-85089)
2022-10-27 00:00:00
mscve
mscve
Chromium: CVE-2022-3661 Insufficient data validation in Extensions
2022-10-27 18:06:07
ubuntucve
ubuntucve
CVE-2022-3661
2022-11-01 00:00:00
debiancve
debiancve
CVE-2022-3661
2022-11-01 23:15:19
prion
prion
Input validation
2022-11-01 23:15:00
veracode
veracode
Information Disclosure
2022-11-17 00:51:25
osv
osv
CVE-2022-3661
2022-11-01 23:15:19
chromedriver-107.0.5304.87-1.1 on GA media
2024-06-15 00:00:00
chromium - security update
2022-10-26 00:00:00
cvelist
cvelist
CVE-2022-3661
2022-11-01 00:00:00
nessus
nessus
Microsoft Edge (Chromium) < 107.0.1418.24 Multiple Vulnerabilities
2022-10-27 00:00:00
Debian DSA-5261-1 : chromium - security update
2022-10-27 00:00:00
openvas
openvas
Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Nov 2022)
2022-11-10 00:00:00
Mageia: Security Advisory (MGASA-2022-0419)
2022-11-14 00:00:00
kaspersky
kaspersky
KLA20019 Multiple vulnerabilities in Microsoft Browser
2022-10-27 00:00:00
KLA20017 Multiple vulnerabilities in Google Chrome
2022-10-25 00:00:00
debian
debian
[SECURITY] [DSA 5261-1] chromium security update
2022-10-26 18:26:49
freebsd
freebsd
chromium -- multiple vulnerabilities
2022-10-25 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2022-11-13 05:25:20
suse
suse
Security update for chromium (important)
2022-10-31 00:00:00
Security update for chromium (important)
2022-10-31 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2022-10-25 00:00:00
altlinux
altlinux
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
41.3%
Related for NVD:CVE-2022-3661