Lucene search

K
osvGoogleOSV:CVE-2022-3318
HistoryNov 01, 2022 - 8:15 p.m.

CVE-2022-3318

2022-11-0120:15:21
Google
osv.dev
4
chromeos
notifications
use after free
cve-2022-3318
heap corruption
ui interaction
remote attacker
google chrome
chromeos prior to 106.0.5249.62
chromium security severity low
software

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

0.001 Low

EPSS

Percentile

46.9%

Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to reboot Chrome OS to potentially exploit heap corruption via UI interaction. (Chromium security severity: Low)

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

0.001 Low

EPSS

Percentile

46.9%