CVE-2022-0337

Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. (Chrome security severity: High)

Affected

Google · Chrome

CVSS v3.1 NVD

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

1.29% chance of exploitation in the next 30 days, 70th percentile

Published

2023-01-02

Updated

2024-10-23

Proof-of-concept exploits (3)

• Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera341★ · 2022-09-04
• maldev866/ChExp-CVE-2022-0337-0★ · 2023-03-01
• zer0ne1/CVE-2022-0337-RePoC0★ · 2023-12-12

Security advisories

• https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html
• https://crbug.com/1247389

References

• CVE Record
• NVD entry

Related

• CVE-2021-21123
• CVE-2021-4104
• CVE-2021-44228
• CVE-2021-45046
• CVE-2021-45105
• CVE-2020-16040