Google · Google Chrome · CVE-2022-2295
**Name of the Vulnerable Software and Affected Versions**
Google Chrome versions prior to 103.0.5060.114
Fedoraproject extra packages for enterprise linux version 8.0
Fedoraproject fedora versions 35 and 36
**Description**
The issue is related to type confusion in the V8 JavaScript engine of Google Chrome, which can be exploited by a remote attacker to potentially corrupt the heap via a crafted HTML page. This could impact the confidentiality, integrity, and availability of protected information.
**Recommendations**
For Google Chrome versions prior to 103.0.5060.114, update to version 103.0.5060.114 or later to resolve the issue.
For Fedoraproject extra packages for enterprise linux version 8.0, update to a version that includes the fix for this issue.
For Fedoraproject fedora versions 35 and 36, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the issue is resolved.