cbcvebase.
CVE-2022-0799
published 2022-04-05

CVE-2022-0799: Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation…

PriorityP344high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.97%
58.1th percentile
Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file.

Affected

8 ranges
VendorProductVersion rangeFixed in
chromiumchromium>= 0 < 99.0.4844.51-1~deb11u199.0.4844.51-1~deb11u1
chromiumchromium>= 0 < 99.0.4844.51-199.0.4844.51-1
chromiumchromium>= 0 < 99.0.4844.51-199.0.4844.51-1
chromiumchromium>= 0 < 99.0.4844.51-199.0.4844.51-1
debianchromium< chromium 99.0.4844.51-1 (bookworm)chromium 99.0.4844.51-1 (bookworm)
googlechrome< 99.0.4844.5199.0.4844.51
googlechrome>= unspecified < 99.0.4844.5199.0.4844.51
msrcmicrosoft_edge——

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv8.8HIGH
vendor_debian8.8HIGH
vendor_msrc8.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.