CVE-2022-2856: Google Chromium Intents Insufficient Input Validation Vulnerability

Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2022-08-18. EPSS: 4.5% chance of exploitation in the next 30 days.

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.

Affected products

• Fedoraproject Fedora: version 37 only
• Google Chrome: before 104.0.5112.101 (fixed in 104.0.5112.101); before 104.0.5112.102 (fixed in 104.0.5112.102)

Published 2022-09-26. Last modified 2026-06-17.