CVE-2022-1364: Type Confusion in V8
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Other sources
Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 100.0.4896.127
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1364?
The severity of CVE-2022-1364 is high with a CVSS score of 8.8.
How does CVE-2022-1364 affect Google Chromium V8 Engine?
CVE-2022-1364 affects Google Chromium V8 Engine versions prior to 100.0.4896.127.
What is the potential impact of CVE-2022-1364?
CVE-2022-1364 can potentially allow a remote attacker to exploit heap corruption via a crafted HTML page.
How can I fix CVE-2022-1364?
To fix CVE-2022-1364, update Google Chrome to version 100.0.4896.127 or later.
Where can I find more information about CVE-2022-1364?
You can find more information about CVE-2022-1364 at the following references: [1](https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_14.html), [2](https://crbug.com/1315901), [3](https://security.gentoo.org/glsa/202208-25).