Medium severity6.5NVD Advisory· Published Aug 4, 2023· Updated Jun 17, 2026
CVE-2022-4955
CVE-2022-4955
Description
Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)
Affected products
3Patches
Vulnerability mechanics
References
2- crbug.com/1349146nvdExploitIssue TrackingMailing ListPatchVendor Advisory
- chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.htmlnvdRelease Notes
News mentions
0No linked articles in our index yet.