CVE-2022-1492 describes an insufficient data validation vulnerability in Google Chrome's Blink Editing component, affecting versions prior to 101.0.4951.41. This medium-severity vulnerability (CVSS 6.1) allows a remote attacker to inject arbitrary scripts or HTML by enticing a user to visit a crafted HTML page, potentially leading to client-side information disclosure and modification. There is no evidence of active exploitation, and public exploit code (Metasploit, Nuclei, ExploitDB) is currently unavailable. While community discussion and media coverage are limited, the vulnerability has been noted in cybersecurity articles.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 101.0.4951.41CPE matchmatch criteria | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.