CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing

Q: What is the severity of CVE-2022-2622?

CVE-2022-2622 is classified as a high severity vulnerability affecting Google Chrome on Windows.

Q: How do I fix CVE-2022-2622?

To fix CVE-2022-2622, upgrade Google Chrome to version 104.0.5112.79 or later.

Q: What specific issue does CVE-2022-2622 address?

CVE-2022-2622 addresses insufficient validation of untrusted input in Safe Browsing in Google Chrome.

Q: Which versions of Google Chrome are affected by CVE-2022-2622?

CVE-2022-2622 affects Google Chrome versions prior to 104.0.5112.79.

Q: Can CVE-2022-2622 be exploited remotely?

Yes, CVE-2022-2622 allows a remote attacker to bypass download restrictions through a crafted file.

Published Jun 3, 2022

Updated

Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file.

Credit

Imre Rad@@ImreRad, @@j00sean

Affected Software

8 affected componentsFixes available

Google Chrome<104.0.5112.79

104.0.5112.79

Google Chrome<104.0.5112.79

Microsoft Windows

Fedoraproject Fedora=37

debian/chromium<104.0.5112.79-1

104.0.5112.79-1

debian/chromium<104.0.5112.79-1

104.0.5112.79-1

debian/chromium<104.0.5112.79-1

104.0.5112.79-1

debian/chromium

150.0.7871.100-1~deb12u1156.0.8078.79-1~deb12u1150.0.7871.181-1~deb13u1156.0.8078.79-1~deb13u1156.0.8078.79-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Google Chrome (Trace Event) to a version that resolves this vulnerability.
Fixed in 104.0.5112.79
Upgrade
Upgrade debian/chromium to a version that resolves this vulnerability.
Fixed in 104.0.5112.79-1
Upgrade
Upgrade debian/chromium to a version that resolves this vulnerability.
Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1
Upgrade
Upgrade Google Chrome to a version that resolves this vulnerability.
Fixed in 104.0.5112.79

Event History

Jun 3, 2022

CVE Published

12:00 AM

Aug 12, 2022

CVE Published

via MITRE·07:37 PM

Data Sourced

via MITRE·07:37 PM

DescriptionWeakness

Data Sourced

via OSV·08:15 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2022-2622?

CVE-2022-2622 is classified as a high severity vulnerability affecting Google Chrome on Windows.

How do I fix CVE-2022-2622?

To fix CVE-2022-2622, upgrade Google Chrome to version 104.0.5112.79 or later.

What specific issue does CVE-2022-2622 address?

CVE-2022-2622 addresses insufficient validation of untrusted input in Safe Browsing in Google Chrome.

Which versions of Google Chrome are affected by CVE-2022-2622?

CVE-2022-2622 affects Google Chrome versions prior to 104.0.5112.79.

Can CVE-2022-2622 be exploited remotely?

Yes, CVE-2022-2622 allows a remote attacker to bypass download restrictions through a crafted file.

CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing

Credit

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2022-2622?

How do I fix CVE-2022-2622?

What specific issue does CVE-2022-2622 address?

Which versions of Google Chrome are affected by CVE-2022-2622?

Can CVE-2022-2622 be exploited remotely?

Company

Resources

Contact