Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
References
Link | Resource |
---|---|
https://crbug.com/1300253 | Exploit Issue Tracking Patch Vendor Advisory |
https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html | Release Notes Vendor Advisory |
https://security.gentoo.org/glsa/202208-25 | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2022-07-22 17:15
Updated : 2022-10-25 12:07
NVD link : CVE-2022-1129
Mitre link : CVE-2022-1129
JSON object : View
CWE
CWE-290
Authentication Bypass by Spoofing
Products Affected
- android
- chrome