CVE-2022-1096: Type Confusion in V8
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Other sources
Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 99.0.4844.84
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1096?
The severity of CVE-2022-1096 is classified as high due to its potential to allow remote code execution.
How do I fix CVE-2022-1096?
To fix CVE-2022-1096, users should update their Google Chrome browser to version 99.0.4844.84 or later.
Which software is affected by CVE-2022-1096?
CVE-2022-1096 affects various versions of Google Chrome and the Chromium V8 Engine up to version 99.0.4844.84.
Can CVE-2022-1096 be exploited through web pages?
Yes, CVE-2022-1096 can be exploited by a remote attacker through a specially crafted HTML page.
Is CVE-2022-1096 related to heap corruption?
Yes, CVE-2022-1096 involves a type confusion vulnerability that can lead to heap corruption.