Vulnerability CVE-2022-3656: Information

Description

Insufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Medium)

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2022-3656
Published: Nov. 2, 2022
Modified: Dec. 9, 2022
Error type identifier: CWE-20

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
chromiumsisyphus107.0.5304.87-alt1125.0.6422.141-alt1ALT-PU-2022-3011-1309438Fixed
chromiump10107.0.5304.87-alt0.p10.1119.0.6045.159-alt0.p10.1ALT-PU-2022-3318-1310099Fixed
chromiumc10f1107.0.5304.87-alt0.p10.1110.0.5481.177-alt1.p10.1ALT-PU-2022-3318-1310099Fixed
chromiump11107.0.5304.87-alt1125.0.6422.141-alt1ALT-PU-2022-3011-1309438Fixed
chromium-gostsisyphus107.0.5304.87-alt1124.0.6367.78-alt1ALT-PU-2022-3104-1310163Fixed
chromium-gostp10110.0.5481.177-alt1.p10.1110.0.5481.177-alt1.p10.1ALT-PU-2023-1462-1310327Fixed
chromium-gostc10f1110.0.5481.177-alt1.p10.1110.0.5481.177-alt1.p10.1ALT-PU-2023-1462-1310327Fixed
chromium-gostp11107.0.5304.87-alt1124.0.6367.78-alt1ALT-PU-2022-3104-1310163Fixed
yandex-browser-stablesisyphus23.1.2.1033-alt124.1.3.845-alt1ALT-PU-2023-1524-1317119Fixed
yandex-browser-stablep1023.1.2.1033-alt124.1.3.845-alt1ALT-PU-2023-1572-1317282Fixed
yandex-browser-stablec10f123.1.2.1033-alt124.1.3.845-alt1ALT-PU-2023-1572-1317282Fixed
yandex-browser-stablec9f223.1.2.1033-alt124.1.3.845-alt1ALT-PU-2023-1524-1317119Fixed
yandex-browser-stablep1123.1.2.1033-alt124.1.3.845-alt1ALT-PU-2023-1524-1317119Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html
  • Release Notes
  • Vendor Advisory
https://crbug.com/1345275
  • Issue Tracking
  • Permissions Required
  • Vendor Advisory

    1. Configuration 1

      cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
      End excliding
      107.0.5304.62
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top