CVE-2022-2860

CVSS 3.1: 6.5 medium
EPSS: <1%p57
Published: Sep 26, 2022 · Sep 26, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-2860 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to bypass cookie prefix restrictions via a crafted HTML page.

Vendors: google fedoraproject

Products: chrome, fedora

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news

1 story

Google fixed a new Chrome Zero

Security AffairsAug 17, 17:01 UTC · Aug 17, 2022Exploit / PoCExploitedCVE-2022-2856 CVE-2022-2852 CVE-2022-2854+112 · 1 read