PT-2022-2402

CVE-2022-1490

·

تاريخ النشر

2022-04-26

·

تاريخ التحديث

2026-10-01

الوصف من

CVSS 3.1
8.8
عالية
المقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 101.0.4951.41
Description The issue is related to a use after free vulnerability in the Browser Switcher extension, which can lead to heap corruption. This can be exploited by a remote attacker who convinces a user to engage in specific interactions via a crafted HTML page, potentially allowing the attacker to disclose protected information.
Recommendations For Google Chrome versions prior to 101.0.4951.41, update to version 101.0.4951.41 or later to resolve the issue. As a temporary workaround, consider disabling the Browser Switcher extension until a patch is applied. Restrict access to crafted HTML pages to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALT-PU-2022-1777
ALT-PU-2022-1822
ALT-PU-2022-1828
ALT-PU-2022-2055
CLEANSTART-2024-RR96243
DSA-5125-1
MGASA-2022-0158
OPENSUSE-SU-2022:0125-1
OPENSUSE-SU-2024:12046-1
OPENSUSE-SU-2024:12948-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾