CVE-2022-3658

Name of the Vulnerable Software and Affected Versions Google Chrome on Chrome OS versions prior to 107.0.5304.62

Description The issue is related to a use after free vulnerability in the Feedback service on Chrome OS in Google Chrome. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information by exploiting heap corruption via specific UI interaction, potentially after convincing a user to install a malicious extension.

Recommendations For Google Chrome on Chrome OS versions prior to 107.0.5304.62, update to version 107.0.5304.62 or later to resolve the issue. As a temporary workaround, consider restricting the installation of extensions to minimize the risk of exploitation.