๐Ÿ” CVE Alert

CVE-2022-4025

MEDIUM 4.3
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th

Inappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data outside an iframe via a crafted HTML page. (Chrome security severity: Low)

Vendor google
Product chrome
Ecosystems
Industries
Technology
Published Jan 2, 2023
Last Updated Oct 29, 2024
Stay Ahead of the Next One

Get instant alerts for google chrome

Be the first to know when new medium vulnerabilities affecting google chrome are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Google / Chrome
unspecified < 98.0.4758.80

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
chromereleases.googleblog.com: https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html crbug.com: https://crbug.com/1260250