Skip to content
OpenAdvisories
Unscored CVE-2022-4955 EUVD-2022-52208GHSA-p5w7-6mxm-h426

Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a mali…

Published Aug 4, 2023 · Updated Aug 3, 2024 · Assigned by Chrome

Vendor: Google Product: Chrome Package: chromium Category: Browsers Ecosystem: Debian

Description

Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)

Affected products

VendorProductAffectedFixed
Google Chrome 108.0.5359.71 – < 108.0.5359.71 108.0.5359.71

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 chromium 108.0.5359.71-1 —
Debian 13 chromium 108.0.5359.71-1 —
Debian 12 chromium 108.0.5359.71-1 —
Debian 11 chromium 108.0.5359.71-2~deb11u1 DSA-5293-1

Advisories 2

References