CVE-2022-3310
6.5
MEDIUM
CVSS 3.1
EPSS 0.45%
Description
Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. (Chromium security severity: Medium)
How to fix CVE-2022-3310
To remediate CVE-2022-3310, upgrade the affected package to a fixed version below.
- Debian/chromium—upgrade to 106.0.5249.61-1~deb11u1 or later
Is CVE-2022-3310 being exploited?
Low — EPSS is 0.4%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 106.0.5249.61-1~deb11u1
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |