← Database

CVE-2022-4025

MEDIUM CVSS: 4.3 Published: 2023-01-02 Modified: 2026-06-17

Description

Inappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data outside an iframe via a crafted HTML page. (Chrome security severity: Low)

Affected Platforms

Google Chrome

Weakness Type

NVD-CWE-noinfo, CWE-203

References