Use After Free

2022-04-2814:20:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

34.2%

JSON

chromium is vulnerable to use after free. The vulnerability exists in Browser Switcher which allows an attacker to cause a memory corruption.

CPENameOperatorVersion
chromium:sideq83.0.4103.116-3.1
chromium:sideq88.0.4324.182-1
chromium:bullseyeeq83.0.4103.116-3.1
chromium:edgeeq81.0.4044.122-r0
chromium:edgeeq92.0.4515.159-r0
chromium:edgeeq98.0.4758.102-r2
chromium:edgeeq99.0.4844.84-r0
chromium:edgeeq80.0.3987.149-r0
chromium:edgeeq100.0.4896.60-r0
chromium:edgeeq90.0.4430.93-r0

Name	Operator	Version
chromium:sid	eq	83.0.4103.116-3.1
chromium:sid	eq	88.0.4324.182-1
chromium:bullseye	eq	83.0.4103.116-3.1
chromium:edge	eq	81.0.4044.122-r0
chromium:edge	eq	92.0.4515.159-r0
chromium:edge	eq	98.0.4758.102-r2
chromium:edge	eq	99.0.4844.84-r0
chromium:edge	eq	80.0.3987.149-r0
chromium:edge	eq	100.0.4896.60-r0
chromium:edge	eq	90.0.4430.93-r0