Inappropriate implementation in Virtual Keyboard in Google Chrome on Chrome OS prior to 100.0.4896.60 allowed a local attacker to bypass navigation restrictions via physical access to the device.
References
Link | Resource |
---|---|
https://crbug.com/1303410 | Exploit Issue Tracking Patch Vendor Advisory |
https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html | Release Notes Vendor Advisory |
https://security.gentoo.org/glsa/202208-25 | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2022-07-22 17:15
Updated : 2022-10-25 11:52
NVD link : CVE-2022-1132
Mitre link : CVE-2022-1132
JSON object : View
CWE
CWE-863
Incorrect Authorization
Products Affected
- chrome_os
- chrome