CVE-2022-0300

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 97.0.4692.99

Description The issue is related to a use after free in the Text Input Method Editor, which can potentially lead to heap corruption. A remote attacker who convinces a user to engage in specific interactions can exploit this issue via a crafted HTML page. This may allow the attacker to execute arbitrary code.

Recommendations For versions prior to 97.0.4692.99, update to version 97.0.4692.99 or later to resolve the issue. As a temporary workaround, consider restricting user interactions with crafted HTML pages until the update is applied.