Lucene search

K

GoogleOSV:CVE-2022-2010

HistoryJul 28, 2022 - 1:15 a.m.

CVE-2022-2010

2022-07-2801:15:16

Google

osv.dev

9

google chrome

sandbox escape

out of bounds read

remote attacker

html page

CVSS3

9.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:H

AI Score

8.8

Confidence

High

EPSS

0.002

Percentile

61.6%

Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

References

chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop.html

crbug.com/1325298

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/

security.gentoo.org/glsa/202208-25

CVSS3

9.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:H

AI Score

8.8

Confidence

High

EPSS

0.002

Percentile

61.6%

Related for OSV:CVE-2022-2010

veracode1 mscve1 cvelist1 debiancve1 nvd1 cve1 ubuntucve1 alpinelinux1 prion1 openvas8 nessus10 kaspersky3 mageia1 osv1 debian1 suse3 chrome1 freebsd1 malwarebytes1 qualysblog1 rapid7blog1 fedora3 gentoo1