CVE-2022-0337

Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. (Chrome security severity: High)

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

1.28% chance of exploitation in the next 30 days, 68th percentile

Published

2023-01-02

Updated

2024-10-23

Proof-of-concept exploits (3)

• Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera340★ · 2022-09-04
• maldev866/ChExp-CVE-2022-0337-0★ · 2023-03-01
• zer0ne1/CVE-2022-0337-RePoC0★ · 2023-12-12

References

• CVE Record
• NVD entry

Related

• CVE-2021-21123
• CVE-2021-4104
• CVE-2021-44228
• CVE-2021-45046
• CVE-2021-45105
• CVE-2020-16040