CVE-2022-3047: Insufficient policy enforcement in Extensions API
Published Jul 7, 2022
·Updated
Insufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page.
Credit
Maurice Dauer
Affected Software
3 affected componentsFixes available
Google Chrome<105.0.5195.52
105.0.5195.52
Google Chrome<105.0.5195.52
fedoraproject fedora=37
Remediation
Event History
Jul 7, 2022
CVE Published
12:00 AM
Sep 26, 2022
CVE Published
via MITRE·03:01 PM
Data Sourced
via MITRE·03:01 PM
DescriptionWeakness
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2022-3047?
CVE-2022-3047 is classified as a high-severity vulnerability.
2
How does CVE-2022-3047 impact Google Chrome users?
CVE-2022-3047 allows attackers to bypass download policies by convincing users to install malicious extensions.
3
How do I fix CVE-2022-3047?
To mitigate CVE-2022-3047, update Google Chrome to version 105.0.5195.52 or later.
4
What versions of Google Chrome are affected by CVE-2022-3047?
CVE-2022-3047 affects Google Chrome versions prior to 105.0.5195.52.
5
Is Fedora 37 affected by CVE-2022-3047?
Yes, Fedora 37 is also impacted by CVE-2022-3047 due to the vulnerable version of Google Chrome included.