Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5350-1
HistoryMar 28, 2022 - 12:00 a.m.

Chromium vulnerability

2022-03-2800:00:00
ubuntu.com
84

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

86.2%

JSON

Releases

  • Ubuntu 18.04 ESM

Packages

  • chromium-browser - Chromium web browser, open-source version of Chrome

Details

It was discovered that Chromium incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchchromium-browser< 99.0.4844.84-0ubuntu0.18.04.1UNKNOWN
Ubuntu18.04noarchchromium-browser-dbgsym< 99.0.4844.84-0ubuntu0.18.04.1UNKNOWN
Ubuntu18.04noarchchromium-browser-l10n< 99.0.4844.84-0ubuntu0.18.04.1UNKNOWN
Ubuntu18.04noarchchromium-chromedriver< 99.0.4844.84-0ubuntu0.18.04.1UNKNOWN
Ubuntu18.04noarchchromium-codecs-ffmpeg< 99.0.4844.84-0ubuntu0.18.04.1UNKNOWN
Ubuntu18.04noarchchromium-codecs-ffmpeg-dbgsym< 99.0.4844.84-0ubuntu0.18.04.1UNKNOWN
Ubuntu18.04noarchchromium-codecs-ffmpeg-extra< 99.0.4844.84-0ubuntu0.18.04.1UNKNOWN
Ubuntu18.04noarchchromium-codecs-ffmpeg-extra-dbgsym< 99.0.4844.84-0ubuntu0.18.04.1UNKNOWN

Related

veracode 1
nessus 7
openvas 10
fedora 3
kaspersky 4
osv 2
freebsd 1
mageia 1
debiancve 1
mscve 1
debian 1
cve 1
chrome 1
attackerkb 1
cisa_kev 1
ics 1
alpinelinux 1
ubuntucve 1
malwarebytes 2
prion 1
thn 9
qt 1
packetstorm 1
suse 3
trellix 2
threatpost 3
qualysblog 1
github 1
hivepro 1
securelist 2
avleonov 1
googleprojectzero 1
gentoo 1
veracode
veracode
Denial Of Service (DoS)
2022-03-29 09:45:40
nessus
nessus
FreeBSD : chromium -- V8 type confusion (323f900d-ac6d-11ec-a0b8-3065ec8fd3ec)
2022-03-26 00:00:00
Google Chrome < 99.0.4844.84 Vulnerability
2022-03-25 00:00:00
Microsoft Edge (Chromium) < 99.0.1150.55 Vulnerability
2022-03-26 00:00:00
openvas
openvas
Fedora: Security Advisory for chromium (FEDORA-2022-ba2c5339d4)
2022-04-08 00:00:00
Google Chrome Security Update (stable-channel-update-for-desktop_25-2022-03) - Mac OS X
2022-03-31 00:00:00
Google Chrome Security Update (stable-channel-update-for-desktop_25-2022-03) - Linux
2022-03-31 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: chromium-99.0.4844.84-1.fc34
2022-04-07 15:15:37
[SECURITY] Fedora 35 Update: chromium-99.0.4844.84-1.fc35
2022-04-07 15:26:48
[SECURITY] Fedora 36 Update: chromium-99.0.4844.84-1.fc36
2022-05-07 04:44:56
kaspersky
kaspersky
KLA12538 DoS vulnerability in Opera
2022-03-29 00:00:00
KLA12492 Type Confusion vulnerability in Microsoft Browser
2022-03-26 00:00:00
KLA12529 Type confusion vulnerability in Microsoft Developer Tools
2022-03-26 00:00:00
osv
osv
chromium-browser vulnerability
2022-03-28 12:33:58
chromium - security update
2022-03-28 00:00:00
freebsd
freebsd
chromium -- V8 type confusion
2022-03-25 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerability
2022-03-28 19:23:37
debiancve
debiancve
CVE-2022-1096
2022-07-23 00:15:00
mscve
mscve
Chromium: CVE-2022-1096 Type Confusion in V8
2022-03-26 07:00:00
debian
debian
[SECURITY] [DSA 5110-1] chromium security update
2022-03-28 07:03:21
cve
cve
CVE-2022-1096
2022-07-23 00:15:00
chrome
chrome
Stable Channel Update for Desktop
2022-03-25 00:00:00
attackerkb
attackerkb
CVE-2022-1096
2022-07-23 00:00:00
cisa_kev
cisa_kev
Google Chromium V8 Type Confusion Vulnerability
2022-03-28 00:00:00
ics
ics
Rockwell Products Impacted by Chromium Type Confusion
2022-07-28 12:00:00
alpinelinux
alpinelinux
CVE-2022-1096
2022-07-23 00:15:00
ubuntucve
ubuntucve
CVE-2022-1096
2022-07-23 00:00:00
malwarebytes
malwarebytes
Update now! Google releases emergency patch for Chrome zero-day used in the wild
2022-03-28 13:42:54
Zero-day puts a dent in Chrome's mojo
2022-09-05 16:30:00
prion
prion
Type confusion
2022-07-23 00:15:00
thn
thn
Google Issues Urgent Chrome Update to Patch Actively Exploited Zero-Day Vulnerability
2022-03-26 02:11:00
Google Releases Urgent Chrome Update to Patch Actively Exploited Zero-Day Flaw
2022-04-15 03:25:00
Update Google Chrome Browser to Patch New Zero-Day Exploit Detected in the Wild
2022-07-05 02:55:00
qt
qt
Security advisory: Recently reported Chromium "Type confusion" issue impacts Qt WebEngine
2022-04-04 00:00:00
packetstorm
packetstorm
Chrome CVE-2022-1096 Incomplete Fix
2022-06-20 00:00:00
suse
suse
Security update for apache2 (important)
2022-03-28 00:00:00
Security update for opera (important)
2022-04-04 00:00:00
Security update for opera (important)
2022-04-08 00:00:00
trellix
trellix
The Bug Report - March 2022 Edition
2022-04-06 00:00:00
The Bug Report - March 2022 Edition
2022-04-06 00:00:00
threatpost
threatpost
Google Patches Chrome’s Fifth Zero-Day of the Year
2022-08-18 14:31:38
Google Patches Actively Exploited Chrome Bug
2022-07-05 11:54:21
Google Chrome Bug Actively Exploited as Zero-Day
2022-03-30 16:14:30
qualysblog
qualysblog
The 9th Google Chrome Zero-Day Threat this Year – Again Just Before the Weekend
2022-12-03 05:24:27
github
github
The Chromium super (inline cache) type confusion
2022-06-29 18:39:46
hivepro
hivepro
Weekly Threat Digest: 21 – 27 March 2022
2022-03-29 13:56:10
securelist
securelist
IT threat evolution in Q1 2022. Non-mobile statistics
2022-05-27 08:00:05
IT threat evolution in Q2 2022. Non-mobile statistics
2022-08-15 12:00:43
avleonov
avleonov
Microsoft Patch Tuesday April 2022 and custom CVE comments sources in Vulristics
2022-04-23 09:22:32
googleprojectzero
googleprojectzero
2022 0-day In-the-Wild Exploitation…so far
2022-06-30 00:00:00
gentoo
gentoo
Chromium, Google Chrome, Microsoft Edge, QtWebEngine: Multiple Vulnerabilities
2022-08-14 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

86.2%

JSON
Related for USN-5350-1
veracode1nessus7openvas10fedora3kaspersky4osv2freebsd1mageia1debiancve1mscve1debian1cve1chrome1attackerkb1cisa_kev1ics1alpinelinux1ubuntucve1malwarebytes2prion1thn9qt1packetstorm1suse3trellix2threatpost3qualysblog1github1hivepro1securelist2avleonov1googleprojectzero1gentoo1