Lucene search

K
hiveproHiveForce LabHIVEPRO:8BBDC3730B0C7EEC6924023913800CB9
HistoryDec 06, 2022 - 6:19 a.m.

Google Chrome’s ninth zero-day in 2022

2022-12-0606:19:49
HiveForce Lab
www.hivepro.com
21

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary CVE-2022-4262 is the fourth actively exploited type confusion bug in Chrome addressed by Google and the ninth zero-day flaw exploited in the wild in 2022. The bug exists as a result of a type confusion issue in Google Chrome's V8 engine. A remote attacker can construct a specially tailored web page, lure the victim into accessing it, cause type confusion, and then execute arbitrary code on the targeted system.

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H