PT-2022-2482

CVE-2022-1637

Published

2022-05-10

Updated

2026-10-01

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 101.0.4951.64

Description The issue is caused by an inappropriate implementation in Web Contents, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This is due to insufficient input validation in the Web Contents component. The exploitation of this issue may allow a remote attacker to execute arbitrary code.

Recommendations For Google Chrome versions prior to 101.0.4951.64, update to version 101.0.4951.64 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-668: Exposure of Resource to Wrong Sphere

CWE-20: Improper Input Validation

Related identifiers

CVE-2022-1637