Lucene search

K

ChromeCVELIST:CVE-2022-2295

HistoryJul 28, 2022 - 1:00 a.m.

CVE-2022-2295

2022-07-2801:00:50

Chrome

www.cve.org

9

v8

google chrome

type confusion

remote attack

heap corruption

crafted html page

AI Score

8.7

Confidence

High

EPSS

0.007

Percentile

80.8%

Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CNA Affected

[
  {
    "product": "Chrome",
    "vendor": "Google",
    "versions": [
      {
        "lessThan": "103.0.5060.114",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html

crbug.com/1336869

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/

security.gentoo.org/glsa/202208-35

AI Score

8.7

Confidence

High

EPSS

0.007

Percentile

80.8%

Related for CVELIST:CVE-2022-2295

osv4 alpinelinux1 mscve1 prion1 debiancve1 ubuntucve1 veracode1 cve1 nvd1 openvas7 chrome2 kaspersky3 nessus9 suse3 freebsd1 debian1 threatpost1 qualysblog1 fedora2 securelist1 gentoo1 rapid7blog1