CVE-2022-1488

Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension...

Design/Logic Flaw

Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension...

CVE-2022-1488

Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension...

CVE-2022-1488

Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension...

CVE-2022-1488

Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension...

CVE-2022-1488

CVE-2022-1488 involves Google Chrome’s Extensions API. The issue is described as an Inappropriate implementation in Extensions API, allowing a user-assisted attacker to leak cross-origin data via a crafted Chrome Extension. Affected software is Chrome prior to version 101.0.4951.41 (the policy wa...

CVE-2022-1488: Exposure of Resource to Wrong Sphere

Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension...

OPENSUSE-SU-2022:10036-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 103.0.5060.53 boo1200783 CVE-2022-2156: Use after free in Base CVE-2022-2157: Use after free in Interest groups CVE-2022-2158: Type Confusion in V8 CVE-2022-2160: Insufficient policy enforcement in DevTools CVE-2022-2161: Use after fre...

Mageia: Security Advisory (MGASA-2022-0241)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Chromium: CVE-2022-2164 Inappropriate implementation in Extensions API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

PT-2022-3063

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 103.0.5060.53 Description The issue is related to an inappropriate implementation in the Extensions API of Google Chrome and Microsoft Edge browsers, which is associated with incorrectly implemented security...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from an improper implementation in the Extensions API...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10009-1 Rating: critical References: 1199893 1200139 1200423 Cross-References: CVE-2022-1853 CVE-2022-1854 CVE-2022-1855 CVE-2022-1856 CVE-2022-1857 CVE-2022-1858 CVE-2022-1859 CVE-2022-1860 CVE-2022-1861...

Chromium: CVE-2022-1872 Insufficient policy enforcement in Extensions API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-1868 Inappropriate implementation in Extensions API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Google Chrome Extensions API Security Feature Issue Vulnerability

Google Chrome is a web browser from Google, an American company. A security signature issue vulnerability exists in versions of Google Chrome prior to 102.0.5005.61, which stems from an incorrect implementation of the Extensions API. The vulnerability can be exploited by an attacker to trick a...

PT-2022-3151

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 102.0.5005.61 Microsoft Edge affected versions not specified Description The issue is related to an inappropriate implementation of security checks for standard elements in the browser extensions API. This could...

PT-2022-3147

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 102.0.5005.61 Microsoft Edge affected versions not specified Description The issue is related to insufficient policy enforcement in the Extensions API of Google Chrome and Microsoft Edge browsers. This can be...

Google Chrome 安全特征问题漏洞

Google Chrome is a web browser from Google, an American company. A security signature issue vulnerability exists in versions of Google Chrome prior to 102.0.5005.61, which stems from an incorrect implementation of the Extensions API. The vulnerability can be exploited by an attacker to trick a...

Google Chrome 权限许可和访问控制问题漏洞

Google Chrome is a web browser from Google, Inc. A privilege permission and access control issue vulnerability exists in Google Chrome versions 70.0.3538.67 through 101.0.4951.67, which stems from insufficient policy enforcement in the Extensions API. A remote attacker could exploit the...