Firetruck

CVE-2022-2856

KEV

Google Chromium Intents Insufficient Input Validation Vulnerability

View CVE record →
Vendor / Project
Google
Product
Chromium Intents
Date added
Aug 18, 2022
Due date
Sep 8, 2022
Known ransomware use
Unknown
CWEs
CWE-20

Description

Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Required action

Apply updates per vendor instructions.

Notes