CVE-2022-3654

Summary

Use after free in Layout in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected Software

Weaknesses

• Use after free

ADP Enrichment

CVE Program Container

Additional References

• https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html
• https://crbug.com/1365330
• http://packetstormsecurity.com/files/170012/Chrome-blink-LocalFrameView-PerformLayout-Use-After-Free.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html
• https://crbug.com/1365330
• http://packetstormsecurity.com/files/170012/Chrome-blink-LocalFrameView-PerformLayout-Use-After-Free.html

• ←Previous
• Next→