China National Vulnerability DatabaseCNVD-2022-87931Google Chrome Skia Memory Misreference Vulnerability
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Google Chrome is a web browser from Google, Inc. A memory misquoting vulnerability exists in versions of Google Chrome prior to 106.0.5249.119. The vulnerability originates from Skia usage post-release and can be exploited by remote attackers to launch an attack via a constructed HTML page using heap corruption.
| CPE | Name | Operator | Version |
|---|---|---|---|
| google chrome <106. | eq | 0.5249.119 |
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H