CVE-2022-4923

published 2023-07-29

CVE-2022-4923: Inappropriate implementation in Omnibox in Google Chrome prior to 99.0.4844.51 allowed an attacker in a privileged network position to perform a…

Priority P4 8 low 3.1 CVSS 3.1

AV N AC H PR H UI R S U C L I L A N

Inappropriate implementation in Omnibox in Google Chrome prior to 99.0.4844.51 allowed an attacker in a privileged network position to perform a man-in-the-middle attack via malicious network traffic. (Chromium security severity: Low)

Affected

8 ranges

Vendor	Product	Version range	Fixed in
chromium	chromium	>= 0 < 99.0.4844.51-1~deb11u1	99.0.4844.51-1~deb11u1
chromium	chromium	>= 0 < 99.0.4844.51-1	99.0.4844.51-1
chromium	chromium	>= 0 < 99.0.4844.51-1	99.0.4844.51-1
chromium	chromium	>= 0 < 99.0.4844.51-1	99.0.4844.51-1
debian	chromium	< chromium 99.0.4844.51-1 (bookworm)	chromium 99.0.4844.51-1 (bookworm)
google	chrome	< 99.0.4844.51	99.0.4844.51
google	chrome	>= 99.0.4844.51 < 99.0.4844.51	99.0.4844.51
google	chrome_chrome	—	—

CVSS provenance

nvd v3.1 3.1 LOW CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N

osv 3.1 LOW

vendor_debian 3.1 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.