PT-2022-1545
CVE-2022-0301
·
تاريخ النشر
2022-01-19
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 97.0.4692.99
Description
The issue is related to a heap buffer overflow in the DevTools component of Google Chrome, which could potentially allow an attacker to exploit heap corruption. This could happen if an attacker convinces a user to install a malicious extension and the user visits a crafted HTML page. The exploitation of this issue may allow a remote attacker to execute arbitrary code.
Recommendations
For Google Chrome versions prior to 97.0.4692.99, update to version 97.0.4692.99 or later to resolve the issue. As a temporary workaround, consider restricting the installation of extensions to trusted sources and avoiding the use of potentially malicious HTML pages until the update is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾