PT-2022-2721 · Google · Google Chrome

Published 2022-03-14 · Updated 2022-03-14

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome (affected versions not specified)

Description The issue is related to a "zero-day" vulnerability in the V8 JavaScript engine handler of Google Chrome, which is associated with the use of memory after it has been freed. This could allow a remote attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2022-03225

Affected Products

Google Chrome

References · 4

• https://bdu.fstec.ru/vul/2022-03225 · Security Note
• https://medium.com/@numencyberlabs/zero-day-vulnerability-chromium-v8-js-engine-issue-1303458-use-after-free-in-x64-instruction-e874419436a6 · Note
• https://chromium.googlesource.com/v8/v8/+/dc9ed94efdac30bdbe88e81f4cf08783c1dc952f · Note
• https://chromium.googlesource.com/v8/v8/+/71a9fcc950f1b8efb27543961745ab0262cda7c4 · Note