NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2022-3656

CVSS 3.1: 8.8 high
EPSS: 2%p80
Published: Nov 1, 2022 · Nov 1, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-3656 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Insufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Medium)

Vendors: google

Products: chrome

Weakness: CWE-20

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news

2 stories

Google Chrome 'SymStealer' Vulnerability Could Affect 2.5 Billion Users

Infosecurity MagazineJan 12, 16:00 UTC · Jan 12, 2023VulnerabilityCVE-2022-3656 CVE-2022-41352

60

Experts Detail Chromium Browser Security Flaw Putting Confidential Data at Risk

The Hacker NewsJan 12, 11:04 UTC · Jan 12, 2023Exploit / PoCCVE-2022-36561

50