PT-2022-4582
CVE-2022-3048
·
Published
2022-08-30
·
Updated
2024-06-15
Description by
CVSS 2.0
7.1
HighMetricsAV:N/AC:H/Au:N/C:C/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Chrome OS versions prior to 105.0.5195.52
Description
The issue is related to an inappropriate implementation of security checks for standard elements in the Chrome OS lockscreen. This could allow a remote attacker to disclose protected information or cause a denial of service. A local attacker with physical access to the device can bypass lockscreen navigation restrictions.
Recommendations
For versions prior to 105.0.5195.52, update to version 105.0.5195.52 or later to resolve the issue. As a temporary workaround, consider restricting physical access to devices to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾