CVE-2022-2160

PoC —

CVSS 3.1

6.5 medium

EPSS

<1%p50

Published

Jul 28, 2022 (Jul 28, 2022)

Modified

Jun 17, 2026

Description

Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from a user's local files via a crafted HTML page.

Vendors: google fedoraproject
Products: chrome, fedora
Weakness: CWE-362
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.