Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who…

Description

Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High)

Scores

EPSS (exploitation in 30 days)

0.82% · top 43% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.4.

Weakness

• Insufficient validation of untrusted input
• CWE-20 (opens in a new tab)All about CWE-20 and its CVEs

Affected products

• Google · Chrome

  • affected unspecified – < 105.0.5195.125

References (7)

• https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_14.html (opens in a new tab)x_transferred
• https://crbug.com/1343104 (opens in a new tab)x_transferred
• https://security.gentoo.org/glsa/202209-23 (opens in a new tab)x_transferred
• https://www.debian.org/security/2022/dsa-5244 (opens in a new tab)x_transferred
• https://security.gentoo.org/glsa/202210-16 (opens in a new tab)x_transferred
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/ (opens in a new tab)x_transferred
• GLSA-202311-11 (opens in a new tab)vendor-advisoryx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2022-3201](https://trackcve.app/badge/CVE-2022-3201.svg)](https://trackcve.app/cve/CVE-2022-3201)

Record last updated 3 Aug 2024, 01:00 UTC.