PT-2022-3805 · Google+4 · Google Chrome+6
Srodulv
+1
·
Published
2022-07-04
·
Updated
2024-06-15
·
CVE-2022-2295
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 103.0.5060.114
Fedoraproject extra packages for enterprise linux version 8.0
Fedoraproject fedora versions 35 and 36
Description
The issue is related to type confusion in the V8 JavaScript engine of Google Chrome, which can be exploited by a remote attacker to potentially corrupt the heap via a crafted HTML page. This could impact the confidentiality, integrity, and availability of protected information.
Recommendations
For Google Chrome versions prior to 103.0.5060.114, update to version 103.0.5060.114 or later to resolve the issue.
For Fedoraproject extra packages for enterprise linux version 8.0, update to a version that includes the fix for this issue.
For Fedoraproject fedora versions 35 and 36, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the issue is resolved.
Exploit
Fix
Type Confusion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Fedoraproject Extra Packages For Enterprise Linux
Fedoraproject Fedora
Google Chrome
Suse
V8 Javascript Engine