Lucene search
Ubuntu.comUB:CVE-2022-3661HistoryNov 01, 2022 - 12:00 a.m.
CVE-2022-3661
2022-11-0100:00:00
ubuntu.com
ubuntu.com
26
google chrome
extension
data validation
remote attack
cross-origin
chromium
ubuntu
debian
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
41.3%
Insufficient data validation in Extensions in Google Chrome prior to
107.0.5304.62 allowed a remote attacker who had compromised the renderer
process to leak cross-origin data via a crafted Chrome extension. (Chromium
security severity: Low)
Notes
| Author | Note |
|---|---|
| alexmurray | The Debian chromium source package is called chromium-browser in Ubuntu |
| mdeslaur | starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | chromium-browser | < 107.0.5304.87-0ubuntu11.18.04.1 | UNKNOWN |
Related
cve
cve
CVE-2022-3661
2022-11-01 23:15:19
debiancve
debiancve
CVE-2022-3661
2022-11-01 23:15:19
mscve
mscve
Chromium: CVE-2022-3661 Insufficient data validation in Extensions
2022-10-27 18:06:07
cnvd
cnvd
Google Chrome Security Bypass Vulnerability (CNVD-2022-85089)
2022-10-27 00:00:00
nvd
nvd
CVE-2022-3661
2022-11-01 23:15:19
osv
osv
CVE-2022-3661
2022-11-01 23:15:19
chromium - security update
2022-10-26 00:00:00
prion
prion
Input validation
2022-11-01 23:15:00
veracode
veracode
Information Disclosure
2022-11-17 00:51:25
cvelist
cvelist
CVE-2022-3661
2022-11-01 00:00:00
nessus
nessus
Microsoft Edge (Chromium) < 107.0.1418.24 Multiple Vulnerabilities
2022-10-27 00:00:00
Debian DSA-5261-1 : chromium - security update
2022-10-27 00:00:00
openvas
openvas
Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Nov 2022)
2022-11-10 00:00:00
Mageia: Security Advisory (MGASA-2022-0419)
2022-11-14 00:00:00
kaspersky
kaspersky
KLA20019 Multiple vulnerabilities in Microsoft Browser
2022-10-27 00:00:00
KLA20017 Multiple vulnerabilities in Google Chrome
2022-10-25 00:00:00
debian
debian
[SECURITY] [DSA 5261-1] chromium security update
2022-10-26 18:26:49
freebsd
freebsd
chromium -- multiple vulnerabilities
2022-10-25 00:00:00
suse
suse
Security update for chromium (important)
2022-10-31 00:00:00
Security update for chromium (important)
2022-10-31 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2022-11-13 05:25:20
chrome
chrome
Stable Channel Update for Desktop
2022-10-25 00:00:00
altlinux
altlinux
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
41.3%
Related for UB:CVE-2022-3661