Lucene search
UbuntuUSN-5350-1HistoryMar 28, 2022 - 12:00 a.m.
Chromium vulnerability
2022-03-2800:00:00
ubuntu.com
91
chromium
ubuntu 18.04 esm
packages
arbitrary code
vulnerability
inputs
unix
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
9.4
Confidence
High
EPSS
0.014
Percentile
86.5%
Releases
- Ubuntu 18.04 ESM
Packages
- chromium-browser - Chromium web browser, open-source version of Chrome
Details
It was discovered that Chromium incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 18.04 | noarch | chromium-browser | < 99.0.4844.84-0ubuntu0.18.04.1 | UNKNOWN |
| Ubuntu | 18.04 | noarch | chromium-browser-dbgsym | < 99.0.4844.84-0ubuntu0.18.04.1 | UNKNOWN |
| Ubuntu | 18.04 | noarch | chromium-browser-l10n | < 99.0.4844.84-0ubuntu0.18.04.1 | UNKNOWN |
| Ubuntu | 18.04 | noarch | chromium-chromedriver | < 99.0.4844.84-0ubuntu0.18.04.1 | UNKNOWN |
| Ubuntu | 18.04 | noarch | chromium-codecs-ffmpeg | < 99.0.4844.84-0ubuntu0.18.04.1 | UNKNOWN |
| Ubuntu | 18.04 | noarch | chromium-codecs-ffmpeg-dbgsym | < 99.0.4844.84-0ubuntu0.18.04.1 | UNKNOWN |
| Ubuntu | 18.04 | noarch | chromium-codecs-ffmpeg-extra | < 99.0.4844.84-0ubuntu0.18.04.1 | UNKNOWN |
| Ubuntu | 18.04 | noarch | chromium-codecs-ffmpeg-extra-dbgsym | < 99.0.4844.84-0ubuntu0.18.04.1 | UNKNOWN |
References
Related
kaspersky
kaspersky
KLA12492 Type Confusion vulnerability in Microsoft Browser
2022-03-26 00:00:00
KLA12538 DoS vulnerability in Opera
2022-03-29 00:00:00
KLA12491 Type Confusion vulnerability in Google Chrome
2022-03-25 00:00:00
osv
osv
chromium-browser vulnerability
2022-03-28 12:33:58
chromium - security update
2022-03-28 00:00:00
CVE-2022-1096
2022-07-23 00:15:08
freebsd
freebsd
chromium -- V8 type confusion
2022-03-25 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerability
2022-03-28 19:23:37
debiancve
debiancve
CVE-2022-1096
2022-07-23 00:15:08
alpinelinux
alpinelinux
CVE-2022-1096
2022-07-23 00:15:08
attackerkb
attackerkb
CVE-2022-1096
2022-07-23 00:00:00
cisa_kev
cisa_kev
Google Chromium V8 Type Confusion Vulnerability
2022-03-28 00:00:00
nessus
nessus
Google Chrome < 99.0.4844.84 Vulnerability
2022-03-25 00:00:00
Debian DSA-5110-1 : chromium - security update
2022-03-28 00:00:00
Ubuntu 18.04 LTS : Chromium vulnerability (USN-5350-1)
2022-03-28 00:00:00
ics
ics
Rockwell Products Impacted by Chromium Type Confusion
2022-07-28 12:00:00
openvas
openvas
Fedora: Security Advisory for chromium (FEDORA-2022-e960d7e1b6)
2022-04-08 00:00:00
Google Chrome Security Update (stable-channel-update-for-desktop_25-2022-03) - Windows
2022-03-31 00:00:00
Fedora: Security Advisory for chromium (FEDORA-2022-ba2c5339d4)
2022-04-08 00:00:00
ubuntucve
ubuntucve
CVE-2022-1096
2022-07-23 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: chromium-99.0.4844.84-1.fc34
2022-04-07 15:15:37
[SECURITY] Fedora 35 Update: chromium-99.0.4844.84-1.fc35
2022-04-07 15:26:48
[SECURITY] Fedora 36 Update: chromium-99.0.4844.84-1.fc36
2022-05-07 04:44:56
veracode
veracode
Denial Of Service (DoS)
2022-03-29 09:45:40
nvd
nvd
CVE-2022-1096
2022-07-23 00:15:08
malwarebytes
malwarebytes
Zero-day puts a dent in Chrome's mojo
2022-09-05 16:30:00
prion
prion
Type confusion
2022-07-23 00:15:00
cvelist
cvelist
CVE-2022-1096
2022-07-22 23:35:35
chrome
chrome
Stable Channel Update for Desktop
2022-03-25 00:00:00
mscve
mscve
Chromium: CVE-2022-1096 Type Confusion in V8
2022-03-26 07:00:00
cve
cve
CVE-2022-1096
2022-07-23 00:15:08
debian
debian
[SECURITY] [DSA 5110-1] chromium security update
2022-03-28 07:03:21
packetstorm
packetstorm
Chrome CVE-2022-1096 Incomplete Fix
2022-06-20 00:00:00
thn
thn
qt
qt
suse
suse
Security update for apache2 (important)
2022-03-28 00:00:00
Security update for opera (important)
2022-04-04 00:00:00
Security update for opera (important)
2022-04-08 00:00:00
trellix
trellix
The Bug Report - March 2022 Edition
2022-04-06 00:00:00
The Bug Report - March 2022 Edition
2022-04-06 00:00:00
threatpost
threatpost
Google Patches Chrome’s Fifth Zero-Day of the Year
2022-08-18 14:31:38
Google Patches Actively Exploited Chrome Bug
2022-07-05 11:54:21
Google Chrome Bug Actively Exploited as Zero-Day
2022-03-30 16:14:30
qualysblog
qualysblog
hivepro
hivepro
Weekly Threat Digest: 21 – 27 March 2022
2022-03-29 13:56:10
github
github
The Chromium super (inline cache) type confusion
2022-06-29 18:39:46
avleonov
avleonov
securelist
securelist
IT threat evolution in Q1 2022. Non-mobile statistics
2022-05-27 08:00:05
IT threat evolution in Q2 2022. Non-mobile statistics
2022-08-15 12:00:43
googleprojectzero
googleprojectzero
2022 0-day In-the-Wild Exploitation…so far
2022-06-30 00:00:00
gentoo
gentoo
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
9.4
Confidence
High
EPSS
0.014
Percentile
86.5%
Related for USN-5350-1