CVE-2022-2856
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0...
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
- Record
CVE-2022-2856- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
- Record
CVE-2022-2856- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2022-35090
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
- Record
EUVD-2022-35090- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-hq6m-mwgx-2pr8
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0...
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
- Record
GHSA-hq6m-mwgx-2pr8- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CISA KEV No score
Google Chromium Intents Insufficient Input Validation Vulnerability
Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
- Record
CVE-2022-2856- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
- Record
CVE-2022-2856- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
Show 8 moreShow less
OSVDEBIAN-CVE-2022-2856
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
- Record
DEBIAN-CVE-2022-2856- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - Updated
- 2026-11-03
OSVUBUNTU-CVE-2022-2856
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
- Record
UBUNTU-CVE-2022-2856- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVMGASA-2022-0307 No score
Updated chromium-browser-stable packages fix security vulnerability
The chromium-browser-stable package has been updated to the 104.0.5112.101 branch, fixing many bugs and 11 CVE. Google is aware that an exploit for CVE-2022-2856 exists in the wild. Some of the addressed CVE are listed below: Critical CVE-2022-2852: Use after free in FedCM. High CVE-2022-2854: Use after free in SwiftShader. High CVE-2022-2855: Use after free in ANGLE. High CVE-2022-2857: Use after free in Blink. High CVE-2022-2858: Use after free in Sign-In Flow. High CVE-2022-2853: Heap buffer overflow in Downloads. High CVE-2022-2856: Insufficient validation of untrusted input in Intents. Medium CVE-2022-2859: Use after free in Chrome OS Shell. Medium CVE-2022-2860: Insufficient policy enforcement in Cookies. Medium CVE-2022-2861: Inappropriate implementation in Extensions API. Various fixes from internal audits, fuzzing and other initiatives
- Record
MGASA-2022-0307- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:10099-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Chromium 104.0.5112.101 (boo#1202509):
- CVE-2022-2852: Use after free in FedCM
- CVE-2022-2854: Use after free in SwiftShader
- CVE-2022-2855: Use after free in ANGLE
- CVE-2022-2857: Use after free in Blink
- CVE-2022-2858: Use after free in Sign-In Flow
- CVE-2022-2853: Heap buffer overflow in Downloads
- CVE-2022-2856: Insufficient validation of untrusted input in Intents
- CVE-2022-2859: Use after free in Chrome OS Shell
- CVE-2022-2860: Insufficient policy enforcement in Cookies
- CVE-2022-2861: Inappropriate implementation in Extensions API
- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)
- Record
openSUSE-SU-2022:10099-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:10108-1 No score
Security update for opera
This update for opera fixes the following issues:
-
Update to 90.0.4480.54
- CHR-8981 Update chromium on desktop-stable-104-4480 to 104.0.5112.102
- DNA-98165 [buildsign] Whitelist Silent.nib when creating universal NI package on Mac
- DNA-101309 Use base filename in PUT request when uploading files to buildbot
-
The update to chromium 104.0.5112.102 fixes following issues: CVE-2022-2852, CVE-2022-2854, CVE-2022-2855, CVE-2022-2857, CVE-2022-2858, CVE-2022-2853, CVE-2022-2856, CVE-2022-2859, CVE-2022-2860, CVE-2022-2861
-
Update to 90.0.4480.48
- DNA-100835 AddressBarModelTestWithCategories.RefreshUnfiltered SuggestionsWhenPrefsChanged fails on beta stream
- DNA-101171 Translations for O90
- DNA-101216 Remove empty string from flow client_capabilities
- DNA-101357 Promote O90 to Stable
- DNA-101383 Revert DNA-101033
-
Complete Opera 90.0 changelog at: https://blogs.opera.com/desktop/changelog-for-90/
-
Update to 89.0.4447.91
- DNA-100673 Crash at void opera::ModalDialogBaseView::OnExtraButtonPressed (const class ui::Event& const)
- DNA-100915 [Sync Settings] Confirm your identity to enable encryption message flickers
- DNA-100937 Missing links to ToS and Privacy Statement in launcher dialog when running installer with –show-eula-window-on-start
- DNA-101002 Make errors from webpack compilation appear in the log
- DNA-101045 Popup contents are pushed outside of popup in 'Unprotected' VPN state
- DNA-101076 Disabled Pinboards should have another color in Account popup
- DNA-101086 Sync – Clicking Next on auth.opera.com/account/v3/desktop/login/confirm-password does not redirect anywhere
-
Update to 89.0.4447.83
- DNA-99507 Badge deactivates on a basket page of the shop
- DNA-99840 Add speed dials to start page
- DNA-100127 Enable #enable-force-dark-from-settings on all streams
- DNA-100233 [Settings] 'Sync everything' and 'Do not sync' unselects itself
- DNA-100560 Add 'suggested speed dials' in the Google search box on the start page
- DNA-100568 Fix icon in suggestions and update layout
- DNA-100646 Add synchronization states to Opera account popup
- DNA-100665 Create private API to open Account popup + allow rich hints
- DNA-100668 Use a category based suggestion list to sort search box suggestions
- DNA-100701 'Force dark page' shortcut don’t work
- DNA-100711 Unable to click suggestions on start page search box
- DNA-100725 [WinLin] Opera account logo is offcenter
- DNA-100762 Suggestions from networks get favicon from network
- DNA-100764 Fix 'Confirm Identity' URL
- DNA-100905 Request to update event_sd_tile_used.type
- DNA-100921 Add accessibility info about sync state to opera account button
- DNA-100943 VPN pro popup can be zoomed
- DNA-100945 Disable Context Menu for VPN and VPN Pro popups
- DNA-100958 Opera account popup should display actual state of synchronization instead of selected option
- DNA-100994 'Secure More devices' is pushed outside of popup
- DNA-101009 Free VPN – 'Try for free' disappear after clicked
- DNA-101012 Remove VPN Pro service available from VPN pro settings when logged in without subscription
- DNA-101094 Unable to close a window from JavaScript
- DNA-101121 chrome.operaAccountPrivate is undefined
- Record
openSUSE-SU-2022:10108-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:10109-1 No score
Security update for opera
This update for opera fixes the following issues:
-
Update to 90.0.4480.54
- CHR-8981 Update chromium on desktop-stable-104-4480 to 104.0.5112.102
- DNA-98165 [buildsign] Whitelist Silent.nib when creating universal NI package on Mac
- DNA-101309 Use base filename in PUT request when uploading files to buildbot
-
The update to chromium 104.0.5112.102 fixes following issues: CVE-2022-2852, CVE-2022-2854, CVE-2022-2855, CVE-2022-2857, CVE-2022-2858, CVE-2022-2853, CVE-2022-2856, CVE-2022-2859, CVE-2022-2860, CVE-2022-2861
-
Update to 90.0.4480.48
- DNA-100835 AddressBarModelTestWithCategories.RefreshUnfiltered SuggestionsWhenPrefsChanged fails on beta stream
- DNA-101171 Translations for O90
- DNA-101216 Remove empty string from flow client_capabilities
- DNA-101357 Promote O90 to Stable
- DNA-101383 Revert DNA-101033
-
Complete Opera 90.0 changelog at: https://blogs.opera.com/desktop/changelog-for-90/
-
Update to 89.0.4447.91
- DNA-100673 Crash at void opera::ModalDialogBaseView::OnExtraButtonPressed (const class ui::Event& const)
- DNA-100915 [Sync Settings] Confirm your identity to enable encryption message flickers
- DNA-100937 Missing links to ToS and Privacy Statement in launcher dialog when running installer with –show-eula-window-on-start
- DNA-101002 Make errors from webpack compilation appear in the log
- DNA-101045 Popup contents are pushed outside of popup in 'Unprotected' VPN state
- DNA-101076 Disabled Pinboards should have another color in Account popup
- DNA-101086 Sync – Clicking Next on auth.opera.com/account/v3/desktop/login/confirm-password does not redirect anywhere
-
Update to 89.0.4447.83
- DNA-99507 Badge deactivates on a basket page of the shop
- DNA-99840 Add speed dials to start page
- DNA-100127 Enable #enable-force-dark-from-settings on all streams
- DNA-100233 [Settings] 'Sync everything' and 'Do not sync' unselects itself
- DNA-100560 Add 'suggested speed dials' in the Google search box on the start page
- DNA-100568 Fix icon in suggestions and update layout
- DNA-100646 Add synchronization states to Opera account popup
- DNA-100665 Create private API to open Account popup + allow rich hints
- DNA-100668 Use a category based suggestion list to sort search box suggestions
- DNA-100701 'Force dark page' shortcut don’t work
- DNA-100711 Unable to click suggestions on start page search box
- DNA-100725 [WinLin] Opera account logo is offcenter
- DNA-100762 Suggestions from networks get favicon from network
- DNA-100764 Fix 'Confirm Identity' URL
- DNA-100905 Request to update event_sd_tile_used.type
- DNA-100921 Add accessibility info about sync state to opera account button
- DNA-100943 VPN pro popup can be zoomed
- DNA-100945 Disable Context Menu for VPN and VPN Pro popups
- DNA-100958 Opera account popup should display actual state of synchronization instead of selected option
- DNA-100994 'Secure More devices' is pushed outside of popup
- DNA-101009 Free VPN – 'Try for free' disappear after clicked
- DNA-101012 Remove VPN Pro service available from VPN pro settings when logged in without subscription
- DNA-101094 Unable to close a window from JavaScript
- DNA-101121 chrome.operaAccountPrivate is undefined
- Record
openSUSE-SU-2022:10109-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12277-1 No score
chromedriver-104.0.5112.101-1.1 on GA media
These are all security issues fixed in the chromedriver-104.0.5112.101-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12277-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromiumDebian:12 |
before 104.0.5112.101-1 | 104.0.5112.101-1 |
chromiumDebian:13 |
before 104.0.5112.101-1 | 104.0.5112.101-1 |
chromiumDebian:14 |
before 104.0.5112.101-1 | 104.0.5112.101-1 |
chromiumDebian:11 From an advisory covering 11 CVEs |
before 104.0.5112.101-1~deb11u1, plus listed versions 100.0.4896.127-1100.0.4896.127-1~deb11u1100.0.4896.60-1100.0.4896.60-1~deb11u1100.0.4896.75-1 Show 40 moreShow less100.0.4896.75-1~deb11u1100.0.4896.88-1100.0.4896.88-1~deb11u1101.0.4951.41-1101.0.4951.41-1~deb11u1101.0.4951.41-2101.0.4951.54-1101.0.4951.64-1101.0.4951.64-1~deb11u1102.0.5005.115-1102.0.5005.115-1~deb11u1102.0.5005.61-1102.0.5005.61-1~deb11u1103.0.5060.114-1103.0.5060.114-1~deb11u1103.0.5060.134-1103.0.5060.134-1~deb11u1103.0.5060.53-1103.0.5060.53-1~deb11u1104.0.5112.79-1104.0.5112.79-1~deb11u190.0.4430.212-193.0.4577.82-197.0.4692.71-0.197.0.4692.71-0.1~deb11u197.0.4692.99-197.0.4692.99-1~deb11u197.0.4692.99-1~deb11u298.0.4758.102-198.0.4758.102-1~deb11u198.0.4758.80-198.0.4758.80-1~deb11u199.0.4818.0-0.199.0.4844.51-199.0.4844.51-1~deb11u199.0.4844.51-299.0.4844.74-199.0.4844.74-1~deb11u199.0.4844.84-199.0.4844.84-1~deb11u1 |
104.0.5112.101-1~deb11u1 |
chromium-browser-stableMageia:8 From an advisory covering 10 CVEs |
before 104.0.5112.101-1.mga8 | 104.0.5112.101-1.mga8 |
chromium-browserUbuntu:18.04:LTS |
before 104.0.5112.101-0ubuntu0.18.04.1, plus listed versions 61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1 Show 45 moreShow less63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.177.0.3865.90-0ubuntu0.18.04.178.0.3904.70-0ubuntu0.18.04.278.0.3904.97-0ubuntu0.18.04.178.0.3904.108-0ubuntu0.18.04.179.0.3945.79-0ubuntu0.18.04.179.0.3945.130-0ubuntu0.18.04.180.0.3987.87-0ubuntu0.18.04.180.0.3987.149-0ubuntu0.18.04.180.0.3987.163-0ubuntu0.18.04.181.0.4044.122-0ubuntu0.18.04.181.0.4044.138-0ubuntu0.18.04.183.0.4103.61-0ubuntu0.18.04.184.0.4147.105-0ubuntu0.18.04.185.0.4183.83-0ubuntu0.18.04.285.0.4183.121-0ubuntu0.18.04.186.0.4240.75-0ubuntu0.18.04.186.0.4240.198-0ubuntu0.18.04.187.0.4280.66-0ubuntu0.18.04.189.0.4389.82-0ubuntu0.18.04.1 |
104.0.5112.101-0ubuntu0.18.04.1 |
chromiumSUSE:Package Hub 15 SP3 From an advisory covering 10 CVEs |
before 104.0.5112.101-bp154.2.23.1 | 104.0.5112.101-bp154.2.23.1 |
chromiumSUSE:Package Hub 15 SP4 From an advisory covering 10 CVEs |
before 104.0.5112.101-bp154.2.23.1 | 104.0.5112.101-bp154.2.23.1 |
chromiumopenSUSE:Leap 15.3 From an advisory covering 10 CVEs |
before 104.0.5112.101-bp154.2.23.1 | 104.0.5112.101-bp154.2.23.1 |
chromiumopenSUSE:Leap 15.4 From an advisory covering 10 CVEs |
before 104.0.5112.101-bp154.2.23.1 | 104.0.5112.101-bp154.2.23.1 |
Show 4 moreShow less
| Package | Affected | Fixed |
|---|---|---|
operaopenSUSE:Leap 15.3 NonFree From an advisory covering 10 CVEs |
before 90.0.4480.54-lp153.2.57.1 | 90.0.4480.54-lp153.2.57.1 |
operaopenSUSE:Leap 15.4 NonFree From an advisory covering 10 CVEs |
before 90.0.4480.54-lp154.2.17.1 | 90.0.4480.54-lp154.2.17.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 10 CVEs |
before 104.0.5112.101-1.1 | 104.0.5112.101-1.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| exploitation | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-2856 is a medium vulnerability (CVSS 6.5) in Google Chrome, published August 18, 2022. CISA lists it as known to be exploited, since August 18, 2022. EUVD reports exploitation since August 18, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.56%, the 91st percentile. Fixed in chromium 104.0.5112.101-1.
References
chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html
crbug.com/1345630
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-2856
nvd.nist.gov/vuln/detail/CVE-2022-2856
Show 194 moreShow less
github.com/advisories/GHSA-hq6m-mwgx-2pr8
security-tracker.debian.org/tracker/CVE-2022-2856
advisories.mageia.org/MGASA-2022-0307.html
bugs.mageia.org/show_bug.cgi?id=30756
blog.chromium.org/2022/06/chrome-104-beta-new-media-query-syntax.html
ubuntu.com/security/CVE-2022-2856
cve.org/CVERecord?id=CVE-2022-2856
lists.opensuse.org/archives/list/[email protected]/thread/KPLXDXLKSIMQN4L3UUXMVBTXFIP5Y7BC
bugzilla.suse.com/1202509
suse.com/security/cve/CVE-2022-2852
Left out here: 16 versions and 2,128 references. The JSON record has them.