PT-2022-5434 · Google+4 · Google Chrome+4

CVE-2022-3887

·

Published

2022-11-08

·

Updated

2026-07-16

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 107.0.5304.106
Description The issue is related to a use after free in Web Workers, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. The severity of this issue is considered high.
Recommendations For versions prior to 107.0.5304.106, update to version 107.0.5304.106 or later to resolve the issue. As a temporary workaround, consider restricting the use of Web Workers until a patch is applied.

Exploit

Fix

DoS

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2022-3175
ALT-PU-2022-7651
ALT-PU-2023-1245
ALT-PU-2023-1410
ALT-PU-2023-1462
ALT-PU-2023-1524
ALT-PU-2023-1572
BDU:2022-06760
CVE-2022-3887
DSA-5275-1
OPENSUSE-SU-2022:10201-1
OPENSUSE-SU-2022:10239-1
OPENSUSE-SU-2022_10239-1
OPENSUSE-SU-2023:0115-1
OPENSUSE-SU-2023_0115-1
OPENSUSE-SU-2024:12494-1
OPENSUSE-SU-2024:12590-1
OPENSUSE-SU-2024:12948-1

Affected Products

Alt Linux
Astra Linux
Google Chrome
Red Os
Suse