CVE-2022-3049

Name of the Vulnerable Software and Affected Versions Google Chrome on Chrome OS, Lacros versions prior to 105.0.5195.52

Description The issue is related to a use after free in SplitScreen, which can potentially lead to heap corruption. A remote attacker could exploit this by convincing a user to interact with a crafted HTML page in a specific way, allowing the attacker to potentially disclose protected information.

Recommendations For versions prior to 105.0.5195.52, update to version 105.0.5195.52 or later to resolve the issue. As a temporary workaround, consider avoiding specific UI interactions that could trigger the use after free condition in SplitScreen until a patch is applied.