Medium severity6.5NVD Advisory· Published Nov 1, 2022· Updated Jun 17, 2026
CVE-2022-3310
CVE-2022-3310
Description
Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. (Chromium security severity: Medium)
Affected products
8- osv-coords5 versionspkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2015.3pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP3pkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweedpkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP4pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2015.4
< 106.0.5249.91-bp153.2.125.1+ 4 more
- (no CPE)range: < 106.0.5249.91-bp153.2.125.1
- (no CPE)range: < 106.0.5249.91-bp153.2.125.1
- (no CPE)range: < 106.0.5249.91-1.1
- (no CPE)range: < 106.0.5249.91-bp154.2.32.1
- (no CPE)range: < 106.0.5249.91-bp154.2.32.1
Patches
Vulnerability mechanics
References
2- crbug.com/1240065nvdExploitIssue TrackingVendor Advisory
- chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.htmlnvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.