VDB

DEBIAN-CVE-2022-1872

DEBIAN-CVE-2022-1872 PUBLISHED CVSS 4.300000190734863 MEDIUM

Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page.

Risk Scores

CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected Products

VendorProductVersions
Debian:14chromium0, 0, 0
Debian:12chromium0, 0, 0
Debian:11chromium100.0.4896.88-1, *, 0
Debian:13chromium0, 0, 0

Timeline

  • Jul 27, 2022 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›