CVE-2022-2856
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
| Vendor | |
| Product | chrome |
| Ecosystems | |
| Industries | Technology |
| Published | Sep 26, 2022 |
| Last Updated | Oct 21, 2025 |
⚠️ Actively Exploited — Act Now
Get instant alerts for google chrome
This vulnerability is actively exploited in the wild. Set up free real-time alerts so you're first to know about threats like CVE-2022-2856.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Google / Chrome
unspecified < 104.0.5112.101
References
chromereleases.googleblog.com: https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html crbug.com: https://crbug.com/1345630 lists.fedoraproject.org: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/ cisa.gov: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-2856