Lucene search
Ubuntu.comUB:CVE-2022-1142HistoryJul 23, 2022 - 12:00 a.m.
CVE-2022-1142
2022-07-2300:00:00
ubuntu.com
ubuntu.com
33
cve-2022-1142
heap buffer overflow
google chrome
webui
remote attacker
heap corruption
devtools interaction
debian
ubuntu
chromium snap
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
60.9%
Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60
allowed a remote attacker who convinced a user to engage in specific user
interaction to potentially exploit heap corruption via specific input into
DevTools.
Notes
| Author | Note |
|---|---|
| alexmurray | The Debian chromium source package is called chromium-browser in Ubuntu |
| mdeslaur | starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | chromium-browser | < 100.0.4896.127-0ubuntu0.18.04.1 | UNKNOWN |
Related
prion
prion
Heap overflow
2022-07-23 00:15:00
cve
cve
CVE-2022-1142
2022-07-23 00:15:09
veracode
veracode
Denial Of Service (DoS)
2022-04-04 18:04:40
cvelist
cvelist
CVE-2022-1142
2022-07-22 23:39:16
debiancve
debiancve
CVE-2022-1142
2022-07-23 00:15:09
osv
osv
CVE-2022-1142
2022-07-23 00:15:09
chromium - security update
2022-04-03 00:00:00
chromedriver-100.0.4896.60-1.1 on GA media
2024-06-15 00:00:00
nvd
nvd
CVE-2022-1142
2022-07-23 00:15:09
nessus
nessus
Google Chrome < 100.0.4896.60 Multiple Vulnerabilities
2022-03-29 00:00:00
Debian DSA-5112-1 : chromium - security update
2022-04-05 00:00:00
Google Chrome < 100.0.4896.60 Multiple Vulnerabilities
2022-03-29 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5112-1)
2022-04-05 00:00:00
Mageia: Security Advisory (MGASA-2022-0130)
2022-04-07 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2022-03-29 00:00:00
kaspersky
kaspersky
KLA12493 Multiple vulnerabilities in Google Chrome
2022-03-29 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerability
2022-04-05 20:32:07
chrome
chrome
Stable Channel Update for Desktop
2022-03-29 00:00:00
debian
debian
[SECURITY] [DSA 5112-1] chromium security update
2022-04-03 15:19:35
suse
suse
Security update for chromium (important)
2022-04-13 00:00:00
gentoo
gentoo
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
60.9%
Related for UB:CVE-2022-1142