CVE-2022-1633: Use after free in Sharesheet

Reference Links

• https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html (Advisory)
• https://crbug.com/1316990
• https://security.gentoo.org/glsa/202208-25

Parent vulnerabilities

(Appears in the following advisories)

• 9125471853816748094

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-1634
• CVE-2022-1635
• CVE-2022-1636
• CVE-2022-1637
• CVE-2022-1638
• CVE-2022-1639
• CVE-2022-1640
• CVE-2022-1641

Frequently Asked Questions

• What is the vulnerability ID?

  The vulnerability ID is CVE-2022-1633.

• What is the title of the vulnerability?

  The title of the vulnerability is 'Use after free in Sharesheet in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption.'

• What is the severity of CVE-2022-1633?

  The severity of CVE-2022-1633 is rated as high with a CVSS score of 8.8.

• How can the vulnerability be exploited?

  The vulnerability can be exploited by a remote attacker who convinces a user to engage in specific UI interactions, potentially leading to heap corruption.

• Which version of Google Chrome on Chrome OS is affected by this vulnerability?

  Google Chrome on Chrome OS prior to version 101.0.4951.64 is affected by this vulnerability.