CVE-2022-4178

CVSS V2 None CVSS V3 None

Description

Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Overview

CVE ID
CVE-2022-4178

Assigner
chrome-cve-admin@google.com

Vulnerability Status
Analyzed

Published Version
2022-11-30T00:15:10.183

Last Modified Date
2022-12-01T23:35:37.253

Weakness Enumerations

CWE	URL
CWE-416	http://cwe.mitre.org/data/definitions/416.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:a:google:chrome::::::::	1	OR		108.0.5359.71

References

Reference URL	Reference Tags
https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html	Release Notes Vendor Advisory
https://crbug.com/1376099	Issue Tracking Permissions Required

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-4178
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4178

History

Created	Old Value	New Value	Data Type	Notes
2022-12-07 18:05:34				Added to TrackCVE