CVE-2022-0337

MEDIUM

Google Chrome <97.0.4692.71 - Info Disclosure

Title source: llm

Description

Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. (Chrome security severity: High)

Exploits (3)

nomisec WRITEUP 340 stars

by Puliczek · poc

https://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera

View Code ZIP pw:eip

nomisec STUB

by zer0ne1 · poc

https://github.com/zer0ne1/CVE-2022-0337-RePoC

View Code ZIP pw:eip

nomisec NO CODE

by maldev866 · poc

https://github.com/maldev866/ChExp-CVE-2022-0337-

View Code ZIP pw:eip

References (2)

[Release Notes, Vendor Advisory] https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html

[Exploit, Vendor Advisory] https://crbug.com/1247389

Scores

CVSS v3 6.5

EPSS 0.1173

EPSS Percentile 93.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Classification

CWE

CWE-668

Status published

Affected Products (1)

google/chrome < 97.0.4692.71

Timeline

Published Jan 02, 2023

Tracked Since Feb 18, 2026