PT-2022-5841
CVE-2022-4436
·
Published
2022-12-13
·
Updated
2024-06-15
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 108.0.5359.124
Description
The issue is related to a use after free in Blink Media, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could enable the attacker to execute arbitrary code. The severity of this issue is considered high.
Recommendations
For Google Chrome versions prior to 108.0.5359.124, update to version 108.0.5359.124 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially malicious HTML pages until the update is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾