CVE-2022-0801: Inappropriate implementation in HTML parser
Published Jul 20, 2021
·Updated
Inappropriate implementation in HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass XSS preventions via a crafted HTML page. (Chrome security severity: Medium)
Credit
Michał Bentkowski(Securitum)
Affected Software
2 affected componentsFixes available
Google Chrome<99.0.4844.51
99.0.4844.51
Google Chrome<99.0.4844.51
Event History
Jul 20, 2021
CVE Published
12:00 AM
Jan 2, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is CVE-2022-0801?
CVE-2022-0801 is a vulnerability in the HTML parser in Google Chrome prior to version 99.0.4844.51.
2
What is the severity of CVE-2022-0801?
The severity of CVE-2022-0801 is Medium with a CVSS score of 6.1.
3
How does CVE-2022-0801 work?
CVE-2022-0801 allows a remote attacker to bypass XSS preventions in Google Chrome by exploiting an inappropriate implementation in the HTML parser.
4
How can I fix CVE-2022-0801?
To fix CVE-2022-0801, update Google Chrome to version 99.0.4844.51 or later.
5
Where can I find more information about CVE-2022-0801?
You can find more information about CVE-2022-0801 on the Google Chrome Releases Blog and the Chromium bug tracker.