PT-2022-4487

CVE-2022-2615

·

Published

2022-08-02

·

Updated

2024-06-15

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 104.0.5112.79
Description The issue is related to insufficient policy enforcement in cookies, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This can be exploited by a specially designed website, potentially revealing protected information. The estimated number of potentially affected devices worldwide is not specified.
Recommendations For Google Chrome versions prior to 104.0.5112.79, update to version 104.0.5112.79 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information when using affected versions of Google Chrome.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2022-2564
ALT-PU-2022-2611
ALT-PU-2022-2835
ALT-PU-2023-1462
DSA-5201-1
MGASA-2022-0277
OPENSUSE-SU-2022:10086-1
OPENSUSE-SU-2022:10092-1
OPENSUSE-SU-2024:12251-1
OPENSUSE-SU-2024:12291-1
OPENSUSE-SU-2024:12948-1
Found an issue in the description? Have something to add? Feel free to write us 👾