CVE-2022-1871

—

CVSS 3.1

4.3 medium

EPSS

<1%p44

Published

Jul 27, 2022 (Jul 27, 2022)

Modified

Jun 17, 2026

Description

Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass file system policy via a crafted HTML page.

Vendors: google
Products: chrome
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.