CVE-2022-1128: Google Chrome

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on the local network segment to leak cross-origin data via a crafted HTML page.

Affected products

• Google Chrome: before 100.0.4896.60 (fixed in 100.0.4896.60)

Published 2022-07-23. Last modified 2026-06-17.