Home

CVE-2022-0108

Description

Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.334

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities fixed in Google Chrome (97.0.4692.71)Windows
Multiple vulnerabilities fixed in Google Chrome (x64) (97.0.4692.71)Windows
Multiple vulnerabilities fixed in Microsoft Edge for chromium business (97.0.1072.55)Windows
Multiple vulnerabilities fixed in Microsoft Edge for chromium business (x64) (97.0.1072.55)Windows
Multiple vulnerabilities are fixed in Google Chrome For Mac 97.0.4692.71Mac
Multiple vulnerabilities are fixed in Mac OS - Ventura 13.2 (Software Update) - AutoRebootMac
Multiple vulnerabilities are fixed in Mac OS - Ventura 13.2.1 (Software Update) - AutoRebootMac
chromium security update(DSA-5046-1) chromium_97.0.4692.71-0.1~deb11u1_amd64.debLinux
Multiple vulnerabilities Affected in Chrome for Centos 97.0.4692.70Linux
Multiple vulnerabilities Affected in Chrome for Debian 97.0.4692.70Linux
Multiple vulnerabilities Affected in Chrome for RedHat 97.0.4692.70Linux
Multiple vulnerabilities Affected in Chrome for Suse 97.0.4692.70Linux
Multiple vulnerabilities Affected in Chrome for Ubuntu 97.0.4692.70Linux
Web content engine library for GTK+ (USN-6061-1) libwebkit2gtk-4.1-0_2.38.6-0ubuntu0.22.04.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkit2gtk-4.1-0_2.38.6-0ubuntu0.22.04.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkit2gtk-4.1-0_2.38.6-0ubuntu0.22.10.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkit2gtk-4.1-0_2.38.6-0ubuntu0.22.10.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkit2gtk-5.0-0_2.38.6-0ubuntu0.22.10.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkit2gtk-5.0-0_2.38.6-0ubuntu0.22.10.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkit2gtk-4.0-37_2.38.6-0ubuntu0.20.04.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkit2gtk-4.0-37_2.38.6-0ubuntu0.20.04.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkit2gtk-4.0-37_2.38.6-0ubuntu0.22.04.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkit2gtk-4.0-37_2.38.6-0ubuntu0.22.04.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkit2gtk-4.0-37_2.38.6-0ubuntu0.22.10.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkit2gtk-4.0-37_2.38.6-0ubuntu0.22.10.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-4.1-0_2.38.6-0ubuntu0.22.04.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-4.1-0_2.38.6-0ubuntu0.22.04.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-4.1-0_2.38.6-0ubuntu0.22.10.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-4.1-0_2.38.6-0ubuntu0.22.10.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-5.0-0_2.38.6-0ubuntu0.22.10.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-5.0-0_2.38.6-0ubuntu0.22.10.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-4.0-18_2.38.6-0ubuntu0.20.04.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-4.0-18_2.38.6-0ubuntu0.20.04.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-4.0-18_2.38.6-0ubuntu0.22.04.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-4.0-18_2.38.6-0ubuntu0.22.04.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-4.0-18_2.38.6-0ubuntu0.22.10.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-4.0-18_2.38.6-0ubuntu0.22.10.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkitgtk-6.0-4_2.40.1-0ubuntu0.23.04.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkitgtk-6.0-4_2.40.1-0ubuntu0.23.04.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkit2gtk-4.1-0_2.40.1-0ubuntu0.23.04.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkit2gtk-4.1-0_2.40.1-0ubuntu0.23.04.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkit2gtk-4.0-37_2.40.1-0ubuntu0.23.04.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libwebkit2gtk-4.0-37_2.40.1-0ubuntu0.23.04.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-4.1-0_2.40.1-0ubuntu0.23.04.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-4.1-0_2.40.1-0ubuntu0.23.04.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-6.0-1_2.40.1-0ubuntu0.23.04.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-6.0-1_2.40.1-0ubuntu0.23.04.1_amd64.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-4.0-18_2.40.1-0ubuntu0.23.04.1_i386.debLinux
Web content engine library for GTK+ (USN-6061-1) libjavascriptcoregtk-4.0-18_2.40.1-0ubuntu0.23.04.1_amd64.debLinux
SUSE-SU-2023:2056-1(SUSE Linux Enterprise Server 12 SP5 ) libjavascriptcoregtk-4_0-18-2.38.6-2.136.1.x86_64.rpmLinux
SUSE-SU-2023:2056-1(SUSE Linux Enterprise Server 12 SP5 ) libjavascriptcoregtk-4_0-18-debuginfo-2.38.6-2.136.1.x86_64.rpmLinux
SUSE-SU-2023:2056-1(SUSE Linux Enterprise Server 12 SP5 ) libwebkit2gtk-4_0-37-2.38.6-2.136.1.x86_64.rpmLinux
SUSE-SU-2023:2056-1(SUSE Linux Enterprise Server 12 SP5 ) libwebkit2gtk-4_0-37-debuginfo-2.38.6-2.136.1.x86_64.rpmLinux
SUSE-SU-2023:2056-1(SUSE Linux Enterprise Server 12 SP5 ) libwebkit2gtk3-lang-2.38.6-2.136.1.noarch.rpmLinux
SUSE-SU-2023:2056-1(SUSE Linux Enterprise Server 12 SP5 ) typelib-1_0-JavaScriptCore-4_0-2.38.6-2.136.1.x86_64.rpmLinux
SUSE-SU-2023:2056-1(SUSE Linux Enterprise Server 12 SP5 ) typelib-1_0-WebKit2-4_0-2.38.6-2.136.1.x86_64.rpmLinux
SUSE-SU-2023:2056-1(SUSE Linux Enterprise Server 12 SP5 ) typelib-1_0-WebKit2WebExtension-4_0-2.38.6-2.136.1.x86_64.rpmLinux
SUSE-SU-2023:2056-1(SUSE Linux Enterprise Server 12 SP5 ) webkit2gtk-4_0-injected-bundles-2.38.6-2.136.1.x86_64.rpmLinux
SUSE-SU-2023:2056-1(SUSE Linux Enterprise Server 12 SP5 ) webkit2gtk-4_0-injected-bundles-debuginfo-2.38.6-2.136.1.x86_64.rpmLinux
SUSE-SU-2023:2056-1(SUSE Linux Enterprise Server 12 SP5 ) webkit2gtk3-debugsource-2.38.6-2.136.1.x86_64.rpmLinux
wpewebkit security update(DSA-5397-1) wpewebkit-driver_2.38.6-1~deb11u1_i386.debLinux
wpewebkit security update(DSA-5397-1) wpewebkit-driver_2.38.6-1~deb11u1_amd64.debLinux
wpewebkit security update(DSA-5397-1) libwpewebkit-1.0-doc_2.38.6-1~deb11u1_all.debLinux
wpewebkit security update(DSA-5397-1) libwpewebkit-1.0-dev_2.38.6-1~deb11u1_i386.debLinux
wpewebkit security update(DSA-5397-1) libwpewebkit-1.0-dev_2.38.6-1~deb11u1_amd64.debLinux
wpewebkit security update(DSA-5397-1) libwpewebkit-1.0-3_2.38.6-1~deb11u1_i386.debLinux
wpewebkit security update(DSA-5397-1) libwpewebkit-1.0-3_2.38.6-1~deb11u1_amd64.debLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-323078Google Chrome (97.0.4692.71)
PATCH-323079Google Chrome (x64) (97.0.4692.71)
PATCH-109333Microsoft Edge for chromium business (99.0.1150.30) (x86)
PATCH-109332Microsoft Edge for chromium business (99.0.1150.30) (x64)
PATCH-609673Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)
PATCH-611601Mac OS - Ventura 13.7.7 (Software Update) (Auto Reboot)(Deployment-Only)
PATCH-611601Mac OS - Ventura 13.7.7 (Software Update) (Auto Reboot)(Deployment-Only)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234