PT-2022-1869

CVE-2022-0098

·

Published

2022-01-04

·

Updated

2024-06-15

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome on Chrome OS versions prior to 97.0.4692.71
Description The issue is related to a use after free in the Screen Capture function of Google Chrome, which can lead to heap corruption. An attacker could potentially exploit this by convincing a user to perform specific gestures or by using a specially crafted web page, allowing for remote code execution.
Recommendations For versions prior to 97.0.4692.71, update to version 97.0.4692.71 or later to resolve the issue. As a temporary workaround, consider restricting access to the Screen Capture function until the update is applied.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2022-1008
ALT-PU-2022-1077
ALT-PU-2022-1136
ALT-PU-2022-1165
ALT-PU-2022-1290
DSA-5046-1
MGASA-2022-0043
OPENSUSE-SU-2022:0014-1
OPENSUSE-SU-2022:0047-1
OPENSUSE-SU-2022_0047-1
OPENSUSE-SU-2022:0110-1
OPENSUSE-SU-2022_0110-1
OPENSUSE-SU-2024:11739-1
OPENSUSE-SU-2024:12948-1
Found an issue in the description? Have something to add? Feel free to write us 👾