CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
First published: Mon Aug 16 2021(Updated: )
Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. (Chromium security severity: Medium)
Credit: chrome-cve-admin@google.com Ashwin Agrawal OptusSydney
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/chromium | <=90.0.4430.212-1~deb10u1 | 116.0.5845.180-1~deb11u1 120.0.6099.109-1~deb11u1 119.0.6045.199-1~deb12u1 120.0.6099.109-1~deb12u1 120.0.6099.109-1 |
| Google Chrome | <106.0.5249.62 | |
| Google Android | ||
| Google Chrome | <106.0.5249.61 | 106.0.5249.61 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- collector/security-tracker-debian
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/description
- collector/chrome-releases
- agent/software-canonical-lookup
- agent/severity
- agent/author
- agent/title
- agent/softwarecombine
- agent/tags
- agent/event
- agent/first-publish-date
- package-manager/debian
- vendor/google
- canonical/google chrome
- canonical/google android