← Database

CVE-2022-3312

MEDIUM CVSS: 4.6 Published: 2022-11-01 Modified: 2026-06-17

Description

Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restrictions via physical access to the device. (Chromium security severity: Medium)

Affected Platforms

Google Chrome

Weakness Type

CWE-306, CWE-306

References