CVE-2022-0301

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 97.0.4692.99

Description The issue is related to a heap buffer overflow in the DevTools component of Google Chrome, which could potentially allow an attacker to exploit heap corruption. This could happen if an attacker convinces a user to install a malicious extension and the user visits a crafted HTML page. The exploitation of this issue may allow a remote attacker to execute arbitrary code.

Recommendations For Google Chrome versions prior to 97.0.4692.99, update to version 97.0.4692.99 or later to resolve the issue. As a temporary workaround, consider restricting the installation of extensions to trusted sources and avoiding the use of potentially malicious HTML pages until the update is applied.