All errata/sisyphus/ALT-PU-2022-2568-1
ALT-PU-2022-2568-1

Package update chromium in branch sisyphus

Version105.0.5195.102-alt1
Task#306334
Published2022-09-06
Max severityCRITICAL
Severity:

Closed issues (2)

BDU:2022-05499
CRITICAL9.8

Уязвимость IPC-библиотеки Mojo браузеров Microsoft Edge и Google Chrome, позволяющая нарушителю выполнить произвольный код

Published: 2022-09-05Modified: 2023-11-21
CVSS 3.xCRITICAL 9.8
CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
References
CVE-2022-3075
CRITICAL9.6

Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Published: 2022-09-26Modified: 2025-10-24
CVSS 3.xCRITICAL 9.6
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
References