Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mscveMicrosoftMS:CVE-2022-1096
HistoryMar 26, 2022 - 7:00 a.m.

Chromium: CVE-2022-1096 Type Confusion in V8

2022-03-2607:00:00
Microsoft
msrc.microsoft.com
1067
chromium
type confusion
v8
cve-2022-1096
google
microsoft edge

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.014

Percentile

86.5%

JSON

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Google is aware that an exploit for CVE-2022-1096 exists in the wild.

Affected configurations

Vulners
Node
microsoftvisual_studio_2022Range<17.1.7
OR
microsoftvisual_studio_2022Range<17.0.10
OR
microsoftedge_chromiumRange<99.0.1150.55
VendorProductVersionCPE
microsoftvisual_studio_2022*cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
microsoftedge_chromium*cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*

Related

ubuntu 1
kaspersky 4
mageia 1
freebsd 1
debiancve 1
osv 5
nessus 7
nvd 1
veracode 1
fedora 3
openvas 10
ubuntucve 1
cisa_kev 1
alpinelinux 1
ics 1
attackerkb 1
prion 1
githubexploit 1
malwarebytes 2
debian 1
cve 1
cvelist 1
chrome 1
qt 1
thn 9
packetstorm 1
suse 3
trellix 2
threatpost 3
qualysblog 1
github 1
hivepro 1
avleonov 1
securelist 2
googleprojectzero 1
gentoo 1
ubuntu
ubuntu
Chromium vulnerability
2022-03-28 00:00:00
kaspersky
kaspersky
KLA12538 DoS vulnerability in Opera
2022-03-29 00:00:00
KLA12492 Type Confusion vulnerability in Microsoft Browser
2022-03-26 00:00:00
KLA12491 Type Confusion vulnerability in Google Chrome
2022-03-25 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerability
2022-03-28 19:23:37
freebsd
freebsd
chromium -- V8 type confusion
2022-03-25 00:00:00
debiancve
debiancve
CVE-2022-1096
2022-07-23 00:15:08
osv
osv
chromedriver-99.0.4844.84-1.1 on GA media
2024-06-15 00:00:00
chromium-browser vulnerability
2022-03-28 12:33:58
chromium - security update
2022-03-28 00:00:00
nessus
nessus
FreeBSD : chromium -- V8 type confusion (323f900d-ac6d-11ec-a0b8-3065ec8fd3ec)
2022-03-26 00:00:00
Google Chrome < 99.0.4844.84 Vulnerability
2022-03-25 00:00:00
Ubuntu 18.04 LTS : Chromium vulnerability (USN-5350-1)
2022-03-28 00:00:00
nvd
nvd
CVE-2022-1096
2022-07-23 00:15:08
veracode
veracode
Denial Of Service (DoS)
2022-03-29 09:45:40
fedora
fedora
[SECURITY] Fedora 35 Update: chromium-99.0.4844.84-1.fc35
2022-04-07 15:26:48
[SECURITY] Fedora 34 Update: chromium-99.0.4844.84-1.fc34
2022-04-07 15:15:37
[SECURITY] Fedora 36 Update: chromium-99.0.4844.84-1.fc36
2022-05-07 04:44:56
openvas
openvas
Google Chrome Security Update (stable-channel-update-for-desktop_25-2022-03) - Linux
2022-03-31 00:00:00
Google Chrome Security Update (stable-channel-update-for-desktop_25-2022-03) - Mac OS X
2022-03-31 00:00:00
Fedora: Security Advisory for chromium (FEDORA-2022-ba2c5339d4)
2022-04-08 00:00:00
ubuntucve
ubuntucve
CVE-2022-1096
2022-07-23 00:00:00
cisa_kev
cisa_kev
Google Chromium V8 Type Confusion Vulnerability
2022-03-28 00:00:00
alpinelinux
alpinelinux
CVE-2022-1096
2022-07-23 00:15:08
ics
ics
Rockwell Products Impacted by Chromium Type Confusion
2022-07-28 12:00:00
attackerkb
attackerkb
CVE-2022-1096
2022-07-23 00:00:00
prion
prion
Type confusion
2022-07-23 00:15:00
githubexploit
githubexploit
Exploit for Type Confusion in Google Chrome
2022-03-29 20:06:33
malwarebytes
malwarebytes
Update now! Google releases emergency patch for Chrome zero-day used in the wild
2022-03-28 13:42:54
Zero-day puts a dent in Chrome's mojo
2022-09-05 16:30:00
debian
debian
[SECURITY] [DSA 5110-1] chromium security update
2022-03-28 07:03:21
cve
cve
CVE-2022-1096
2022-07-23 00:15:08
cvelist
cvelist
CVE-2022-1096
2022-07-22 23:35:35
chrome
chrome
Stable Channel Update for Desktop
2022-03-25 00:00:00
qt
qt
Security advisory: Recently reported Chromium "Type confusion" issue impacts Qt WebEngine
2022-04-04 00:00:00
thn
thn
Google Issues Urgent Chrome Update to Patch Actively Exploited Zero-Day Vulnerability
2022-03-26 02:11:00
Google Releases Urgent Chrome Update to Patch Actively Exploited Zero-Day Flaw
2022-04-15 03:25:00
Update Google Chrome Browser to Patch New Zero-Day Exploit Detected in the Wild
2022-07-05 02:55:00
packetstorm
packetstorm
Chrome CVE-2022-1096 Incomplete Fix
2022-06-20 00:00:00
suse
suse
Security update for apache2 (important)
2022-03-28 00:00:00
Security update for opera (important)
2022-04-04 00:00:00
Security update for opera (important)
2022-04-08 00:00:00
trellix
trellix
The Bug Report - March 2022 Edition
2022-04-06 00:00:00
The Bug Report - March 2022 Edition
2022-04-06 00:00:00
threatpost
threatpost
Google Patches Actively Exploited Chrome Bug
2022-07-05 11:54:21
Google Patches Chrome’s Fifth Zero-Day of the Year
2022-08-18 14:31:38
Google Chrome Bug Actively Exploited as Zero-Day
2022-03-30 16:14:30
qualysblog
qualysblog
The 9th Google Chrome Zero-Day Threat this Year – Again Just Before the Weekend
2022-12-03 05:24:27
github
github
The Chromium super (inline cache) type confusion
2022-06-29 18:39:46
hivepro
hivepro
Weekly Threat Digest: 21 – 27 March 2022
2022-03-29 13:56:10
avleonov
avleonov
Microsoft Patch Tuesday April 2022 and custom CVE comments sources in Vulristics
2022-04-23 09:22:32
securelist
securelist
IT threat evolution in Q1 2022. Non-mobile statistics
2022-05-27 08:00:05
IT threat evolution in Q2 2022. Non-mobile statistics
2022-08-15 12:00:43
googleprojectzero
googleprojectzero
2022 0-day In-the-Wild Exploitation…so far
2022-06-30 00:00:00
gentoo
gentoo
Chromium, Google Chrome, Microsoft Edge, QtWebEngine: Multiple Vulnerabilities
2022-08-14 00:00:00

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.014

Percentile

86.5%

JSON
Related for MS:CVE-2022-1096
ubuntu1kaspersky4mageia1freebsd1debiancve1osv5nessus7nvd1veracode1fedora3openvas10ubuntucve1cisa_kev1alpinelinux1ics1attackerkb1prion1githubexploit1malwarebytes2debian1cve1cvelist1chrome1qt1thn9packetstorm1suse3trellix2threatpost3qualysblog1github1hivepro1avleonov1securelist2googleprojectzero1gentoo1