CVE-2022-4182: Inappropriate implementation in Fenced Frames

Q: What is the severity of CVE-2022-4182?

CVE-2022-4182 has a Chromium security severity rating of Medium.

Q: How do I fix CVE-2022-4182?

To fix CVE-2022-4182, update Google Chrome to version 108.0.5359.71 or later.

Q: What allows attackers to exploit CVE-2022-4182?

CVE-2022-4182 allows attackers to bypass fenced frame restrictions via a crafted HTML page.

Q: Which versions of Google Chrome are affected by CVE-2022-4182?

Google Chrome versions prior to 108.0.5359.71 are affected by CVE-2022-4182.

Q: Is CVE-2022-4182 specific to any operating system?

CVE-2022-4182 is found in Google Chrome and is not exclusive to any particular operating system.

Published Sep 28, 2022

Updated

Inappropriate implementation in Fenced Frames in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass fenced frame restrictions via a crafted HTML page. (Chromium security severity: Medium)

Credit

Peter Nemeth

Affected Software

6 affected componentsFixes available

Google Chrome<108.0.5359.71

108.0.5359.71

Google Chrome<108.0.5359.71

debian/chromium<108.0.5359.71-1

108.0.5359.71-1

debian/chromium<108.0.5359.71-1

108.0.5359.71-1

debian/chromium<108.0.5359.71-1

108.0.5359.71-1

debian/chromium

150.0.7871.100-1~deb12u1156.0.8078.79-1~deb12u1150.0.7871.181-1~deb13u1156.0.8078.79-1~deb13u1156.0.8078.79-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Google Chrome (Trace Event) to a version that resolves this vulnerability.
Fixed in 108.0.5359.71
Upgrade
Upgrade debian/chromium to a version that resolves this vulnerability.
Fixed in 108.0.5359.71-1
Upgrade
Upgrade debian/chromium to a version that resolves this vulnerability.
Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1
Upgrade
Upgrade Google Chrome to a version that resolves this vulnerability.
Fixed in 108.0.5359.71

Event History

Sep 28, 2022

CVE Published

12:00 AM

Nov 29, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Nov 30, 2022

Data Sourced

via OSV·12:15 AM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2022-4182?

CVE-2022-4182 has a Chromium security severity rating of Medium.

How do I fix CVE-2022-4182?

To fix CVE-2022-4182, update Google Chrome to version 108.0.5359.71 or later.

What allows attackers to exploit CVE-2022-4182?

CVE-2022-4182 allows attackers to bypass fenced frame restrictions via a crafted HTML page.

Which versions of Google Chrome are affected by CVE-2022-4182?

Google Chrome versions prior to 108.0.5359.71 are affected by CVE-2022-4182.

Is CVE-2022-4182 specific to any operating system?

CVE-2022-4182 is found in Google Chrome and is not exclusive to any particular operating system.

CVE-2022-4182: Inappropriate implementation in Fenced Frames

Credit

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2022-4182?

How do I fix CVE-2022-4182?

What allows attackers to exploit CVE-2022-4182?

Which versions of Google Chrome are affected by CVE-2022-4182?

Is CVE-2022-4182 specific to any operating system?

Company

Resources

Contact