PT-2022-5256
CVE-2022-3309
·
تاريخ النشر
2022-09-27
·
تاريخ التحديث
2025-05-06
الوصف من
CVSS 2.0
7.8
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome on ChromeOS versions prior to 106.0.5249.62
Description
The issue is related to a use after free in the assistant component of Google Chrome, which could allow a remote attacker to potentially perform a sandbox escape via specific UI gestures if a user is convinced to engage in these gestures. The exploitation of this issue may also allow an attacker to disclose protected information using a specially crafted web page.
Recommendations
For Google Chrome on ChromeOS versions prior to 106.0.5249.62, update to version 106.0.5249.62 or later to resolve the issue.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾