Inappropriate implementation in full screen in Google Chrome on Android prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
References
Link | Resource |
---|---|
https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html | Release Notes Vendor Advisory |
https://crbug.com/1301873 | Exploit Issue Tracking Patch Vendor Advisory |
https://security.gentoo.org/glsa/202208-25 | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2022-07-25 07:15
Updated : 2022-08-30 11:02
NVD link : CVE-2022-1307
Mitre link : CVE-2022-1307
JSON object : View
CWE
CWE-290
Authentication Bypass by Spoofing
Products Affected
- android
- chrome