CVE-2022-1132 describes an inappropriate implementation in the Virtual Keyboard of Google Chrome on Chrome OS, affecting versions prior to 100.0.4896.60. This vulnerability allows a local attacker with physical access to the device to bypass navigation restrictions. Rated as Medium severity (CVSS 6.1), it requires physical access (AV:P) but has low attack complexity (AC:L) and no user interaction (UI:N), potentially leading to high confidentiality and integrity impacts (C:H, I:H). There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, with only one mention and one article found.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 100.0.4896.60CPE matchmatch criteria | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.