CVE-2022-0305: Inappropriate implementation in Service Worker API
Published Dec 23, 2021
·Updated
Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
Credit
@@uwu7586
Affected Software
2 affected componentsFixes available
Google Chrome<97.0.4692.99
97.0.4692.99
Google Chrome<97.0.4692.99
Event History
Dec 23, 2021
CVE Published
12:00 AM
Feb 12, 2022
CVE Published
via MITRE·01:35 AM
Data Sourced
via MITRE·01:35 AM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2022-0305?
CVE-2022-0305 has been classified with a high severity rating due to its potential to compromise site isolation in affected versions of Google Chrome.
2
How do I fix CVE-2022-0305?
To fix CVE-2022-0305, upgrade Google Chrome to version 97.0.4692.99 or later.
3
What does CVE-2022-0305 affect?
CVE-2022-0305 affects Google Chrome versions prior to 97.0.4692.99.
4
What type of vulnerability is CVE-2022-0305?
CVE-2022-0305 is an inappropriate implementation vulnerability in the Service Worker API.
5
Can CVE-2022-0305 be exploited remotely?
Yes, CVE-2022-0305 can be exploited remotely by an attacker who has compromised the renderer process.