CVE-2022-2165: Insufficient data validation in URL formatting
Published Sep 19, 2021
·Updated
Insufficient data validation in URL formatting in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
Credit
Rayyan Bijoora
Affected Software
4 affected componentsFixes available
Google Chrome<103.0.5060.53
103.0.5060.53
Google Chrome<103.0.5060.53
fedoraproject fedora=35
fedoraproject fedora=36
Event History
Sep 19, 2021
CVE Published
12:00 AM
Jul 28, 2022
CVE Published
via MITRE·12:41 AM
Data Sourced
via MITRE·12:41 AM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2022-2165?
CVE-2022-2165 is classified as a high-severity vulnerability due to its potential for domain spoofing.
2
How do I fix CVE-2022-2165?
To fix CVE-2022-2165, update Google Chrome to version 103.0.5060.53 or later.
3
What types of attacks are possible with CVE-2022-2165?
CVE-2022-2165 allows remote attackers to exploit domain spoofing via maliciously crafted domain names.
4
Which versions of Google Chrome are affected by CVE-2022-2165?
CVE-2022-2165 affects Google Chrome versions prior to 103.0.5060.53.
5
Can CVE-2022-2165 affect users of Fedora?
Yes, CVE-2022-2165 can affect users of Fedora versions 35 and 36 if running an affected version of Google Chrome.