CVE-2022-2160: Insufficient policy enforcement in DevTools
Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from a user's local files via a crafted HTML page.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2022-2160?
CVE-2022-2160 has been classified as a high severity vulnerability due to the potential exposure of sensitive user information.
How do I fix CVE-2022-2160?
To remediate CVE-2022-2160, users should update Google Chrome to version 103.0.5060.53 or later.
Which versions of Google Chrome are affected by CVE-2022-2160?
CVE-2022-2160 affects Google Chrome versions prior to 103.0.5060.53.
What type of attack does CVE-2022-2160 allow?
CVE-2022-2160 allows an attacker to potentially access sensitive information from a user's local files through a malicious extension.
Is there any impact on Windows from CVE-2022-2160?
Yes, CVE-2022-2160 primarily affects users of Google Chrome on Windows prior to version 103.0.5060.53.