CVE-2022-1309: Insufficient policy enforcement in developer tools
Published Jul 17, 2020
·Updated
Insufficient policy enforcement in developer tools in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Credit
David Erceg
Affected Software
2 affected componentsFixes available
Google Chrome<100.0.4896.88
100.0.4896.88
Google Chrome<100.0.4896.88
Remediation
Patch Available
Event History
Jul 17, 2020
CVE Published
12:00 AM
Jul 25, 2022
CVE Published
via MITRE·01:40 PM
Data Sourced
via MITRE·01:40 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2022-1309?
CVE-2022-1309 has been classified as a high severity vulnerability due to potential sandbox escape risks.
2
How do I fix CVE-2022-1309?
To fix CVE-2022-1309, update Google Chrome to version 100.0.4896.88 or later.
3
What versions of Google Chrome are affected by CVE-2022-1309?
CVE-2022-1309 affects all versions of Google Chrome prior to 100.0.4896.88.
4
Can CVE-2022-1309 be exploited remotely?
Yes, CVE-2022-1309 can potentially be exploited remotely through a crafted HTML page.
5
What is the nature of the vulnerability in CVE-2022-1309?
CVE-2022-1309 involves insufficient policy enforcement in developer tools of Google Chrome.