The vulnerability of the Layout component in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

A use-after-free in the Chrome and Edge Layout component may allow remote arbitrary code execution.

Reporter	Title	Published	Views	Family All 55
ALT Linux	Security fix for the ALT Linux 10 package yandex-browser-stable version 23.1.2.1033-alt1	4 Apr 202300:00	–	altlinux
ATTACKERKB	CVE-2022-3654	1 Nov 202223:15	–	attackerkb
AstraLinux	Astra Linux - уязвимость в chromium	20 May 202605:53	–	astralinux
FreeBSD	chromium -- multiple vulnerabilities	25 Oct 202200:00	–	freebsd
Circl	CVE-2022-3654	27 Oct 202218:40	–	circl
CNNVD	Google Chrome 资源管理错误漏洞	25 Oct 202200:00	–	cnnvd
CNVD	Google Chrome Layout code execution vulnerability	27 Oct 202200:00	–	cnvd
CVE	CVE-2022-3654	1 Nov 202200:00	–	cve
Cvelist	CVE-2022-3654	1 Nov 202200:00	–	cvelist
Debian	[SECURITY] [DSA 5261-1] chromium security update	26 Oct 202218:26	–	debian

Vulners

Node

google google_chromeRange<107.0.5304.68

google google_chromeRange<107.0.5304.62

Source	Link
chromereleases	www.chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-3654
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3654
crbug	www.crbug.com/1365330
suse	www.suse.com/security/cve/CVE-2022-3654.html
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.6/
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20221220SE16
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2022-1221SE17MD
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0131SE47MD
web	www.web.nvd.nist.gov/view/vuln/detail

28 Feb 2023 00:00Current

8High risk

Vulners AI Score8

CVSS 39.6

CVSS 210

EPSS0.23798