Vulnerability CVE-2022-0117: Information

Description

Policy bypass in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Severity: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

URL: https://nvd.nist.gov/vuln/detail/CVE-2022-0117
Published: Feb. 12, 2022
Modified: Nov. 7, 2023
Error type identifier: CWE-863

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
chromiumsisyphus97.0.4692.71-alt1124.0.6367.78-alt1ALT-PU-2022-1008-1293044Fixed
chromiump1097.0.4692.71-alt0.p10.1119.0.6045.159-alt0.p10.1ALT-PU-2022-1077-1293337Fixed
chromiump997.0.4692.71-alt0.p9.197.0.4692.99-alt0.p9.1ALT-PU-2022-1165-1293971Fixed
chromiumc10f197.0.4692.71-alt0.p10.1110.0.5481.177-alt1.p10.1ALT-PU-2022-1077-1293337Fixed
chromium-gostsisyphus97.0.4692.71-alt1121.0.6167.160-alt1ALT-PU-2022-1136-1294090Fixed
chromium-gostp1097.0.4692.99-alt0.p10.1110.0.5481.177-alt1.p10.1ALT-PU-2022-1290-1295105Fixed
chromium-gostc10f197.0.4692.99-alt0.p10.1110.0.5481.177-alt1.p10.1ALT-PU-2022-1290-1295105Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html
  • Release Notes
  • Vendor Advisory
https://crbug.com/1115847
  • Exploit
  • Issue Tracking
  • Patch
  • Vendor Advisory
FEDORA-2022-d1a15f9cdb
    FEDORA-2022-49b52819a4
      FEDORA-2022-57923346cf

          1. Configuration 1

            cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
            End excliding
            97.0.4692.71

            Configuration 2

            cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
            cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
            cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
        VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
        Version: v24.4.2
        Back to top