CVE-2022-3309

Name of the Vulnerable Software and Affected Versions Google Chrome on ChromeOS versions prior to 106.0.5249.62

Description The issue is related to a use after free in the assistant component of Google Chrome, which could allow a remote attacker to potentially perform a sandbox escape via specific UI gestures if a user is convinced to engage in these gestures. The exploitation of this issue may also allow an attacker to disclose protected information using a specially crafted web page.

Recommendations For Google Chrome on ChromeOS versions prior to 106.0.5249.62, update to version 106.0.5249.62 or later to resolve the issue.