CVE-2022-2856 — Google Chromium Intents Insufficient Input Validation Vulnerability

provenance: imported · CVE: CVE-2022-2856

CVE-2022-2856: Google Chromium Intents Insufficient Input Validation Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Google
Product	Chromium Intents
Date added	2022-08-18
Due date	2022-09-08
Ransomware campaign use	Unknown

Description

Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html; https://nvd.nist.gov/vuln/detail/CVE-2022-2856

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-2856
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

concept/cve-anatomy