PT-2022-1987

CVE-2022-0113

·

Published

2022-01-04

·

Updated

2026-10-31

Description by

CVSS 2.0
7.1
High
MetricsAV:N/AC:M/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 97.0.4692.71
Description The issue is related to an inappropriate implementation in Blink, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This is due to a lack of proper source data validation, enabling an attacker to disclose protected information using a specially designed HTML page.
Recommendations For versions prior to 97.0.4692.71, update to version 97.0.4692.71 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and implementing additional security measures to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALT-PU-2022-1008
ALT-PU-2022-1077
ALT-PU-2022-1136
ALT-PU-2022-1165
ALT-PU-2022-1290
CLEANSTART-2024-WJ86679
DSA-5046-1
MGASA-2022-0043
OPENSUSE-SU-2022:0014-1
OPENSUSE-SU-2022:0047-1
OPENSUSE-SU-2022_0047-1
OPENSUSE-SU-2022:0110-1
OPENSUSE-SU-2022_0110-1
OPENSUSE-SU-2024:11739-1
OPENSUSE-SU-2024:11985-1
OPENSUSE-SU-2024:12948-1
Found an issue in the description? Have something to add? Feel free to write us 👾