398 matches found
CVE-2022-4193
Insufficient policy enforcement in File System API in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. Chromium security severity: Medium...
PT-2022-26160
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 108.0.5359.71 Description The issue is related to insufficient policy enforcement in the File System API, allowing a remote attacker to bypass file system restrictions through a crafted HTML page. This could...
CVE-2022-4193
CVE-2022-4193 affects Google Chrome/Chromium File System API. Root cause: insufficient policy enforcement allowing a crafted HTML page to bypass file system restrictions. Impact: remote bypass of file system policy with CVSS 3.1 base score 8.8 (High) per NVD; Chrome’s 108.0.5359.71 stable update ...
chromium -- multiple vulnerabilities
Chrome Releases reports: This release contains 28 security fixes, including: 1379054 High CVE-2022-4174: Type Confusion in V8. Reported by Zhenghang Xiao @Kipreyyy on 2022-10-27 1381401 High CVE-2022-4175: Use after free in Camera Capture. Reported by Leecraso and Guang Gong of 360 Alpha Lab on...
CVE-2022-4193
Insufficient policy enforcement in File System API in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. Chromium security severity: Medium...
Information Disclosure
chromium is vulnerable to information disclosure. The vulnerability exists due to insufficient data validation in File System API in Google Chrome which allows a remote attacker to bypass File System restrictions via a crafted HTML page...
Information Disclosure
chromium is vulnerable to information disclosure. The vulnerability exists due to insufficient data validation in File System API in Google Chrome which allows a remote attacker to bypass File System restrictions via a crafted HTML page...
Information Disclosure
chromium is vulnerable to information disclosure. The vulnerability exists due to insufficient data validation in File System API in Google Chrome which allows a remote attacker to bypass File System restrictions via a crafted HTML page...
CVE-2022-3443
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2022-3443
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2022-3443
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page. Chromium security severity: Low...
UBUNTU-CVE-2022-3443
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2022-3444
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page and malicious file. Chromium security severity: Low...
CVE-2022-3444
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page and malicious file. Chromium security severity: Low...
CVE-2022-3443
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page. Chromium security severity: Low...
UBUNTU-CVE-2022-3444
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page and malicious file. Chromium security severity: Low...
CVE-2022-3444: Improper Input Validation
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page and malicious file. Chromium security severity: Low...
CVE-2022-3444
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page and malicious file. Chromium security severity: Low...
CVE-2022-3443
CVE-2022-3443 concerns Google Chrome up to version 106.0.5249.62 (inclusive). The vulnerability arises from insufficient data validation in the File System API, enabling a remote attacker to bypass file-system restrictions via a crafted HTML page. The NVD entry notes a Chromium-based severity of ...
CVE-2022-3443: Undefined Security Weakness
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page. Chromium security severity: Low...