CVE-2022-4923Google Chrome vulnerability

5 documents5 sources
Severity
3.1LOWNVD
EPSS
0.1%
top 82.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJul 29

Description

Inappropriate implementation in Omnibox in Google Chrome prior to 99.0.4844.51 allowed an attacker in a privileged network position to perform a man-in-the-middle attack via malicious network traffic. (Chromium security severity: Low)

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:NExploitability: 0.5 | Impact: 2.5

Affected Packages5 packages

CVEListV5google/chrome99.0.4844.5199.0.4844.51
NVDgoogle/chrome< 99.0.4844.51
debiandebian/chromium< chromium 99.0.4844.51-1 (bookworm)
Debianchromium/chromium< 99.0.4844.51-1~deb11u1+3

🔴Vulnerability Details

2
OSV
CVE-2022-4923: Inappropriate implementation in Omnibox in Google Chrome prior to 992023-07-29
GHSA
GHSA-pph7-f2fw-25v3: Inappropriate implementation in Omnibox in Google Chrome prior to 992023-07-29

📋Vendor Advisories

2
Chrome
Stable Channel Update for Desktop: CVE-2022-49232022-03-01
Debian
CVE-2022-4923: chromium - Inappropriate implementation in Omnibox in Google Chrome prior to 99.0.4844.51 a...2022