by Kastro
Paper/Archive/CVE-2022-2010

CVE-2022-2010

Google Chrome — Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who had compromised the renderer pro…

EPSS 1%CVSS 9.3
critical.is priorityof 100
42
CVSS 9.3 (NVD)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 69.6.696 × 2013.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Affected

ProductAffectedFixed inSource
Chromeunspecified – < 102.0.5005.115102.0.5005.115CNA

Scores by source

NVD9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:H

References

refchromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop.htmlrefcrbug.com/1325298advisorysecurity.gentoo.org/glsa/202208-25advisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE