CVE-2022-3723

Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2022-3723

Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2022-3373

Out of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

CVE-2022-3723

Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10180-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10180-1 advisory. - Type Confusion in V8. CVE-2022-3652, CVE-2022-3723 - Heap buffer overflow in Vulkan. CVE-2022-3653 - Use after free in Layout...

CVE-2022-3652

CVE-2022-3652 is a type confusion issue in V8 affecting Google Chrome/Chromium prior to 107.0.5304.62, enabling potential remote exploitation via crafted HTML pages and leading to heap corruption. The Chrome stable-channel fix is 107.0.5304.62 (Windows/Linux/macOS) with subsequent 107.0.5304.68 D...

CVE-2022-3373

Out of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

CVE-2022-3373

CVE-2022-3373 affects Google Chrome’s V8 in the Chromium base. The issue is an out-of-bounds write via a crafted HTML page, allowing a remote attacker to perform an out-of-bounds memory write with a High severity impact. The vulnerability is associated with Chrome/Chromium builds prior to 106.0.5...

CVE-2022-3723

CVE-2022-3723 is a Type Confusion in V8 affecting Google Chrome (Chromium-based) up to version 107.0.5304.87. The root cause is a V8 type confusion that can allow remote heap corruption via a crafted HTML page. Documents in connected data indicate Chrome/Chromium-based products are vulnerable and...

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10177-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10177-1 advisory. - Type Confusion in V8. CVE-2022-3652, CVE-2022-3723 - Heap buffer overflow in Vulkan. CVE-2022-3653 - Use after free in Layout...

CVE-2022-3652

Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2022-3373

Out of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

Chromium: CVE-2022-3723 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware of reports that an exploit for CVE-2022-3723 exists in the wild...

Google Chrome V8 Code Execution Vulnerability (CNVD-2022-85092)

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that could be exploited by attackers to execute arbitrary code or cause a denial of service on a system...

Debian DSA-5263-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5263 advisory. - Type Confusion in V8. CVE-2022-3723 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Don’t spend another weekend patching Chrome

As we head into the weekend, Google has released an emergency security update for the Chrome desktop web browser to address a high-severity vulnerability known to be exploited in the wild. This is the seventh Chrome zero-day fixed this year by Google. This security bug CVE-2022-3723; QID 377721 i...

A Chrome fix for an in-the-wild exploit is out—Check your version

Google has announced an update for Chrome that fixes an in-the-wild exploit. Chrome Stable channel has been updated to 107.0.5304.87 for Mac and Linux, and 107.0.5304.87/.88 for Windows. The vulnerability at hand is described as a type confusion issue in the V8 Javascript engine. Mitigation If...

Chrome Zero Day – Just Before the Weekend (again)

As we head into the weekend, Google has released an emergency security update for the Chrome desktop web browser to address a high-severity vulnerability known to be exploited in the wild. This is the seventh Chrome zero-day fixed this year by Google. This security bug CVE-2022-3723; QID 377721 i...

Google Issues Urgent Chrome Update to Patch Actively Exploited Zero-Day Vulnerability

Google on Thursday rolled out emergency fixes to contain an actively exploited zero-day flaw in its Chrome web browser. The vulnerability, tracked as CVE-2022-3723, has been described as a type confusion flaw in the V8 JavaScript engine. Security researchers Jan Vojtěšek, Milánek, and Przemek...

FreeBSD : chromium -- Type confusion in V8 (1225c888-56ea-11ed-b5c3-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1225c888-56ea-11ed-b5c3-3065ec8fd3ec advisory. - Type Confusion in V8. CVE-2022-3723 Note that Nessus has not tested for this issue but has instead...