Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on the local network segment to leak cross-origin data via a crafted HTML page.
References
Link | Resource |
---|---|
https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html | Release Notes Vendor Advisory |
https://crbug.com/1301920 | Exploit Issue Tracking Patch Vendor Advisory |
https://security.gentoo.org/glsa/202208-25 | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2022-07-22 17:15
Updated : 2022-10-25 11:58
NVD link : CVE-2022-1128
Mitre link : CVE-2022-1128
JSON object : View
CWE
CWE-668
Exposure of Resource to Wrong Sphere
Products Affected
- chrome
microsoft
- windows