Debian/chromium: medium 4.6
Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restrictions via physical access to the device.
Action: Upgrade chromium to 106.0.5249.61-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 106.0.5249.61-1 | - |
Fixed versions
| 106.0.5249.61-1 |
Sources
- osv: DEBIAN-CVE-2022-3312#Debian:13/chromium
- https://security-tracker.debian.org/tracker/CVE-2022-3312
published · modified · JSON