CVE-2022-4185

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 108.0.5359.71 Microsoft Edge (affected versions not specified)

Description The issue is related to an inappropriate implementation in Navigation, allowing a remote attacker to spoof the contents of the modal dialogue via a crafted HTML page. This can be achieved by exploiting a vulnerability associated with improperly implemented security checks for standard elements. The estimated number of potentially affected devices and details about real-world incidents are not provided.

Recommendations For Google Chrome versions prior to 108.0.5359.71, update to version 108.0.5359.71 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.