CVE-2022-2856
Fixed in a distro release ExploitedEPSS 5%CVSS 6.5
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
Products: Google Chrome, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | chromium | 104.0.5112.101-1~deb11u1 |
| Debian 12 | chromium | 104.0.5112.101-1 |
| Debian 13 | chromium | 104.0.5112.101-1 |
| Debian 14 | chromium | 104.0.5112.101-1 |
| SUSE Package Hub 15 SP3 | chromium | 104.0.5112.101-bp154.2.23.1 |
| SUSE Package Hub 15 SP4 | chromium | 104.0.5112.101-bp154.2.23.1 |
| Ubuntu 18.04 LTS | chromium-browser | 104.0.5112.101-0ubuntu0.18.04.1 |
| openSUSE Leap 15.3 | chromium | 104.0.5112.101-bp154.2.23.1 |
| openSUSE Leap 15.3 NonFree | opera | 90.0.4480.54-lp153.2.57.1 |
| openSUSE Leap 15.4 | chromium | 104.0.5112.101-bp154.2.23.1 |
| openSUSE Leap 15.4 NonFree | opera | 90.0.4480.54-lp154.2.17.1 |
| openSUSE Tumbleweed | chromium | 104.0.5112.101-1.1 |
| openSUSE Tumbleweed | chromium | 113.0.5672.92-1.1 |