CVE-2022-1128: Inappropriate implementation in Web Share API
Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on the local network segment to leak cross-origin data via a crafted HTML page.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 100.0.4896.60 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 100.0.4896.60-1 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2022-1128?
CVE-2022-1128 is classified as a high-severity vulnerability allowing cross-origin data leakage.
How do I fix CVE-2022-1128?
To fix CVE-2022-1128, update Google Chrome to version 100.0.4896.60 or later.
What systems are affected by CVE-2022-1128?
CVE-2022-1128 specifically affects versions of Google Chrome prior to 100.0.4896.60 running on Windows.
What type of attack does CVE-2022-1128 enable?
CVE-2022-1128 enables an attacker on the same local network segment to potentially leak sensitive cross-origin data.
What is the nature of the vulnerability in CVE-2022-1128?
CVE-2022-1128 is due to an inappropriate implementation in the Web Share API in Google Chrome.