CVE-2022-1305: Use after free in storage
Published Jan 7, 2022
·Updated
Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit
Anonymous
Affected Software
2 affected componentsFixes available
Google Chrome<100.0.4896.88
100.0.4896.88
Google Chrome<100.0.4896.88
Event History
Jan 7, 2022
CVE Published
12:00 AM
Jul 25, 2022
CVE Published
via MITRE·01:39 PM
Data Sourced
via MITRE·01:39 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2022-1305?
CVE-2022-1305 has a high severity rating due to the potential for remote code execution via heap corruption.
2
How do I fix CVE-2022-1305?
To fix CVE-2022-1305, update Google Chrome to version 100.0.4896.88 or newer.
3
What versions of Google Chrome are affected by CVE-2022-1305?
CVE-2022-1305 affects Google Chrome versions prior to 100.0.4896.88.
4
Can CVE-2022-1305 be exploited remotely?
Yes, CVE-2022-1305 can be exploited remotely through a crafted HTML page.
5
Is there a workaround for CVE-2022-1305?
There is no official workaround for CVE-2022-1305; the best mitigation is to update the browser.