Lucene search
HistoryJan 02, 2023 - 11:15 p.m.
CVE-2022-4025
google chrome
paint
inappropriate implementation
cross-origin data
html page
security vulnerability
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
AI Score
3.6
Confidence
High
EPSS
0.001
Percentile
47.3%
Inappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data outside an iframe via a crafted HTML page. (Chrome security severity: Low)
Affected configurations
Node
googlechromeRange<98.0.4758.80
Related
veracode
veracode
Information Disclosure
2023-03-13 05:45:06
prion
prion
Design/Logic Flaw
2023-01-02 23:15:00
cvelist
cvelist
CVE-2022-4025
2023-01-02 00:00:00
ubuntucve
ubuntucve
CVE-2022-4025
2023-01-02 00:00:00
debiancve
debiancve
CVE-2022-4025
2023-01-02 23:15:10
osv
osv
CVE-2022-4025
2023-01-02 23:15:10
chromium - security update
2022-02-07 00:00:00
kaspersky
kaspersky
KLA20201 DoS vulnerability in Opera
2022-02-16 00:00:00
KLA12438 Multiple vulnerabilities in Google Chrome
2022-02-01 00:00:00
cve
cve
CVE-2022-4025
2023-01-02 23:15:10
openvas
openvas
Debian: Security Advisory (DSA-5068-1)
2022-02-09 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2022-02-01 00:00:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
AI Score
3.6
Confidence
High
EPSS
0.001
Percentile
47.3%
Related for NVD:CVE-2022-4025