← Database

CVE-2022-2160

MEDIUM CVSS: 6.5 Published: 2022-07-28 Modified: 2026-06-17

Description

Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from a user's local files via a crafted HTML page.

Affected Platforms

Microsoft WindowsFedoraproject FedoraGoogle Chrome

Weakness Type

CWE-362, CWE-362

References