CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
Inappropriate implementation in Virtual Keyboard in Google Chrome on Chrome OS prior to 100.0.4896.60 allowed a local attacker to bypass navigation restrictions via physical access to the device.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 100.0.4896.60 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 100.0.4896.60-1 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1 - Upgrade
Upgrade
Google Chrome on Chrome OSto a version that resolves this vulnerability.Fixed in 100.0.4896.60
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-1132.
What is the title of the vulnerability?
The title of the vulnerability is 'Inappropriate implementation in Virtual Keyboard in Google Chrome on Chrome OS prior to 100.0.4896.60'.
What is the description of the vulnerability?
The vulnerability allowed a local attacker to bypass navigation restrictions via physical access to the device.
Which software versions are affected by the vulnerability?
Google Chrome on Chrome OS versions prior to 100.0.4896.60 are affected by the vulnerability.
How severe is this vulnerability?
This vulnerability has a severity rating of medium, with a CVSS score of 6.1.