Vulnerability Details : CVE-2022-2856
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
Vulnerability category: Input validation
CVE-2022-2856 is in the CISA Known Exploited Vulnerabilities Catalog
CISA vulnerability name:Google Chrome Intents Insufficient Input Validation Vulnerability
CISA required action:Apply updates per vendor instructions.
CISA description:Google Chrome Intents allows for insufficient validation of untrusted input, causing unknown impacts. CISA will update this description if more information becomes available.
Added on 2022-08-18 Action due date 2022-09-08
Exploit prediction scoring system (EPSS) score for CVE-2022-2856
Probability of exploitation activity in the next 30 days: 0.17%
CVSS scores for CVE-2022-2856
|Base Score||Base Severity||CVSS Vector||Exploitability Score||Impact Score||Source|
CWE ids for CVE-2022-2856
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: [email protected] (Primary)
References for CVE-2022-2856
Permissions Required;Vendor Advisory
Mailing List;Third Party Advisory
Patch;Release Notes;Vendor Advisory