p PatchFirst

CVE-2022-1871

CVE-2022-1871

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass file system policy via a crafted HTML page.

CVSS 4.3 · Medium · EPSS 0.6% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • chrome

    Versions
    • ≥ unspecified, < 102.0.5005.61: Affected (custom)

    Update to 102.0.5005.61

  • chromium Debian:12

    Affected ranges
    • ECOSYSTEM: < 102.0.5005.61-1

    Update to 102.0.5005.61-1

  • chromium Debian:13

    Affected ranges
    • ECOSYSTEM: < 102.0.5005.61-1

    Update to 102.0.5005.61-1

  • chromium Debian:14

    Affected ranges
    • ECOSYSTEM: < 102.0.5005.61-1

    Update to 102.0.5005.61-1

  • chromium-browser Ubuntu:18.04:LTS

    Versions
    • 61.0.3163.100-0ubuntu1.1378
    • 62.0.3202.62-0ubuntu0.17.10.1380
    • 62.0.3202.89-0ubuntu1.1386
    • 62.0.3202.94-0ubuntu1.1388
    • 63.0.3239.84-0ubuntu1
    • 63.0.3239.108-0ubuntu1
    • 64.0.3282.119-0ubuntu1
    • 64.0.3282.140-0ubuntu1
    • 64.0.3282.167-0ubuntu1
    • 65.0.3325.146-0ubuntu1
    • 65.0.3325.181-0ubuntu1
    • 66.0.3359.139-0ubuntu0.18.04.3
    • 66.0.3359.181-0ubuntu0.18.04.1
    • 67.0.3396.99-0ubuntu0.18.04.1
    • 68.0.3440.75-0ubuntu0.18.04.1
    • 68.0.3440.106-0ubuntu0.18.04.1
    • 69.0.3497.81-0ubuntu0.18.04.1
    • 70.0.3538.67-0ubuntu0.18.04.1
    • 70.0.3538.77-0ubuntu0.18.04.1
    • 70.0.3538.110-0ubuntu0.18.04.1
    • 71.0.3578.80-0ubuntu0.18.04.1
    • 71.0.3578.98-0ubuntu0.18.04.1
    • 72.0.3626.119-0ubuntu0.18.04.1
    • 72.0.3626.121-0ubuntu0.18.04.1
    • 73.0.3683.75-0ubuntu0.18.04.1
    • 73.0.3683.86-0ubuntu0.18.04.1
    • 74.0.3729.169-0ubuntu0.18.04.1
    • 75.0.3770.90-0ubuntu0.18.04.1
    • 75.0.3770.142-0ubuntu0.18.04.1
    • 76.0.3809.87-0ubuntu0.18.04.1
    • 76.0.3809.100-0ubuntu0.18.04.1
    • 77.0.3865.90-0ubuntu0.18.04.1
    • 78.0.3904.70-0ubuntu0.18.04.2
    • 78.0.3904.97-0ubuntu0.18.04.1
    • 78.0.3904.108-0ubuntu0.18.04.1
    • 79.0.3945.79-0ubuntu0.18.04.1
    • 79.0.3945.130-0ubuntu0.18.04.1
    • 80.0.3987.87-0ubuntu0.18.04.1
    • 80.0.3987.149-0ubuntu0.18.04.1
    • 80.0.3987.163-0ubuntu0.18.04.1
    • 81.0.4044.122-0ubuntu0.18.04.1
    • 81.0.4044.138-0ubuntu0.18.04.1
    • 83.0.4103.61-0ubuntu0.18.04.1
    • 84.0.4147.105-0ubuntu0.18.04.1
    • 85.0.4183.83-0ubuntu0.18.04.2
    • 85.0.4183.121-0ubuntu0.18.04.1
    • 86.0.4240.75-0ubuntu0.18.04.1
    • 86.0.4240.198-0ubuntu0.18.04.1
    • 87.0.4280.66-0ubuntu0.18.04.1
    • 89.0.4389.82-0ubuntu0.18.04.1
    • 89.0.4389.90-0ubuntu0.18.04.2
    • 90.0.4430.72-0ubuntu0.18.04.1
    • 90.0.4430.93-0ubuntu0.18.04.1
    • 91.0.4472.77-0ubuntu0.18.04.1
    • 91.0.4472.101-0ubuntu0.18.04.1
    • 92.0.4515.159-0ubuntu0.18.04.1
    • 93.0.4577.63-0ubuntu0.18.04.1
    • 94.0.4606.71-0ubuntu0.18.04.1
    • 94.0.4606.81-0ubuntu0.18.04.1
    • 95.0.4638.69-0ubuntu0.18.04.1
    • 97.0.4692.71-0ubuntu0.18.04.1
    • 99.0.4844.51-0ubuntu0.18.04.1
    • 99.0.4844.84-0ubuntu0.18.04.1
    • 100.0.4896.127-0ubuntu0.18.04.1
    • 101.0.4951.64-0ubuntu0.18.04.1
    Affected ranges
    • ECOSYSTEM: < 103.0.5060.134-0ubuntu0.18.04.1

    Update to 103.0.5060.134-0ubuntu0.18.04.1

Original sources

Check your server →