CVE-2022-1857

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 102.0.5005.61 Microsoft Edge (affected versions not specified)

Description The issue is related to insufficient policy enforcement in the File System API, allowing a remote attacker to bypass file system restrictions. This can be achieved via a crafted HTML page. The estimated number of potentially affected devices and details about real-world incidents are not provided.

Recommendations For Google Chrome versions prior to 102.0.5005.61, update to version 102.0.5005.61 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.