CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. (Chromium security severity: Medium)
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 106.0.5249.61 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 106.0.5249.61-1 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1 - Upgrade
Upgrade
Google Chrome on Androidto a version that resolves this vulnerability.Fixed in 106.0.5249.62
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2022-3310?
The severity of CVE-2022-3310 is classified as Medium.
How do I fix CVE-2022-3310?
To fix CVE-2022-3310, upgrade Google Chrome to version 106.0.5249.61 or later.
Who is affected by CVE-2022-3310?
CVE-2022-3310 affects users of Google Chrome on Android prior to version 106.0.5249.62.
What type of vulnerability is CVE-2022-3310?
CVE-2022-3310 is an insufficient policy enforcement vulnerability.
Can CVE-2022-3310 be exploited remotely?
Yes, CVE-2022-3310 can potentially be exploited if an attacker convinces the user to install a malicious application.