PT-2022-5841

CVE-2022-4436

·

Published

2022-12-13

·

Updated

2024-06-15

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 108.0.5359.124
Description The issue is related to a use after free in Blink Media, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could enable the attacker to execute arbitrary code. The severity of this issue is considered high.
Recommendations For Google Chrome versions prior to 108.0.5359.124, update to version 108.0.5359.124 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially malicious HTML pages until the update is applied.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2023-1047
ALT-PU-2023-1245
ALT-PU-2023-1410
ALT-PU-2023-1462
ALT-PU-2023-1524
ALT-PU-2023-1572
DSA-5302-1
MGASA-2022-0480
OPENSUSE-SU-2022:10244-1
OPENSUSE-SU-2022:10245-1
OPENSUSE-SU-2022:10254-1
OPENSUSE-SU-2022_10254-1
OPENSUSE-SU-2023:0115-1
OPENSUSE-SU-2023_0115-1
OPENSUSE-SU-2024:12566-1
OPENSUSE-SU-2024:12609-1
OPENSUSE-SU-2024:12948-1
Found an issue in the description? Have something to add? Feel free to write us 👾