Log in Start free

Vulnerability · Published Feb 11, 2022 · Assigned by Chrome

CVE-2022-0108

Medium 6.5

In plain English

A medium-severity security flaw in Chrome from Google. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 67% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)1.1%top 33.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20qt5-qtwebengine5.15.3_git20220121-r4ALPINE-CVE-2022-0108
Alpine:v3.21qt5-qtwebengine5.15.3_git20220121-r4ALPINE-CVE-2022-0108
Alpine:v3.22qt5-qtwebengine5.15.3_git20220121-r4ALPINE-CVE-2022-0108
Alpine:v3.23qt5-qtwebengine5.15.3_git20220121-r4ALPINE-CVE-2022-0108
Debian:12chromium97.0.4692.71-0.1DEBIAN-CVE-2022-0108
Debian:13chromium97.0.4692.71-0.1DEBIAN-CVE-2022-0108
Debian:14chromium97.0.4692.71-0.1DEBIAN-CVE-2022-0108
Debian:12webkit2gtk2.40.1-1DEBIAN-CVE-2022-0108
Debian:13webkit2gtk2.40.1-1DEBIAN-CVE-2022-0108
Debian:14webkit2gtk2.40.1-1DEBIAN-CVE-2022-0108
Debian:12wpewebkit2.38.6-1DEBIAN-CVE-2022-0108
Debian:13wpewebkit2.38.6-1DEBIAN-CVE-2022-0108
Debian:14wpewebkit2.38.6-1DEBIAN-CVE-2022-0108
Ubuntu:22.04:LTSqtwebkit-opensource-srcno fix listedUBUNTU-CVE-2022-0108
Ubuntu:24.04:LTSqtwebkit-opensource-srcno fix listedUBUNTU-CVE-2022-0108
Ubuntu:22.04:LTSwebkit2gtk2.38.6-0ubuntu0.22.04.1UBUNTU-CVE-2022-0108
Ubuntu:22.04:LTSwebkit2gtk2.38.6-0ubuntu0.22.04.1USN-6061-1
Ubuntu:22.04:LTSwpewebkitno fix listedUBUNTU-CVE-2022-0108

Affected products (as reported)

VendorProductVersions
Google Chrome unspecified – before 97.0.4692.71

References