PT-2022-2755 · Google+2 · Google Chrome+2

Man Yue Mo · Published 2022-05-24 · Updated 2024-06-15 · CVE-2022-1869

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 102.0.5005.61

Description The issue is related to a type confusion error in the V8 JavaScript engine of Google Chrome, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This could potentially lead to the disclosure of protected information.

Recommendations For versions prior to 102.0.5005.61, update to version 102.0.5005.61 or later to resolve the issue.

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

ALT-PU-2022-1978

ALT-PU-2022-1984

ALT-PU-2022-2004

ALT-PU-2022-2055

BDU:2022-03272

CVE-2022-1869

DSA-5148-1

MGASA-2022-0211

OPENSUSE-SU-2022:10005-1

OPENSUSE-SU-2022:10009-1

OPENSUSE-SU-2024:12109-1

OPENSUSE-SU-2024:12948-1

Affected Products

Alt Linux

Astra Linux

Google Chrome

References · 2343

• https://osv.dev/vulnerability/DEBIAN-CVE-2022-1869 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5148-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-1869 · Security Note
• https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1869 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-1869 · Vendor Advisory
• https://security.gentoo.org/glsa/202208-25 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03272 · Security Note
• https://osv.dev/vulnerability/MGASA-2022-0211 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1869 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-1121SE47 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-1869 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-1011SE17MD · Vendor Advisory