PT-2021-6341

CVE-2022-0799

Published

2021-12-12

Updated

2024-06-15

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 99.0.4844.51

Description The issue is related to insufficient policy enforcement in the Installer component of Google Chrome, allowing a remote attacker to perform local privilege escalation via a crafted offline installer file. This could potentially bypass security restrictions.

Recommendations For Google Chrome versions prior to 99.0.4844.51, update to version 99.0.4844.51 or later to resolve the issue. As a temporary workaround, consider restricting the use of offline installer files until the update is applied.

Exploitability

Exploit

Fix

Impacts

Researchers

Abdelhamid Naceri

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CWE-59: Improper Link Resolution Before File Access (\'Link Following\')

Related identifiers