PT-2022-5627

CVE-2022-4135

·

Published

2022-11-24

·

Updated

2024-06-28

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 107.0.5304.121
Description The issue is related to a heap buffer overflow in the GPU component of Google Chrome, allowing a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The severity of this issue is classified as High by Chromium. This vulnerability can be exploited by a remote attacker, potentially leading to a sandbox escape.
Recommendations For Google Chrome versions prior to 107.0.5304.121, update to version 107.0.5304.121 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable GPU components until a patch is applied.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-995F-9X5R-2RCJ
ALT-PU-2022-3280
ALT-PU-2023-1245
ALT-PU-2023-1410
ALT-PU-2023-1462
ALT-PU-2023-1524
ALT-PU-2023-1572
DSA-5289-1
MGASA-2022-0451
OPENSUSE-SU-2022:10221-1
OPENSUSE-SU-2024:12538-1
OPENSUSE-SU-2024:12948-1
Found an issue in the description? Have something to add? Feel free to write us 👾