Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscure the contents of the Omnibox (URL bar) via a crafted HTML page.
References
Link | Resource |
---|---|
https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html | Release Notes Vendor Advisory |
https://crbug.com/1246188 | Exploit Issue Tracking Patch Vendor Advisory |
https://security.gentoo.org/glsa/202208-25 | Third Party Advisory |
Configurations
History
08 Aug 2023, 14:22
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-1021 |
Information
Published : 2022-07-23 00:15
Updated : 2024-02-28 19:29
NVD link : CVE-2022-1138
Mitre link : CVE-2022-1138
CVE.ORG link : CVE-2022-1138
JSON object : View
Products Affected
- chrome
CWE
CWE-1021
Improper Restriction of Rendered UI Layers or Frames