CVE-2022-1641: Use after free in Web UI Diagnostics

Reference Links

• https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html (Advisory)
• https://crbug.com/1305068
• https://security.gentoo.org/glsa/202208-25

Parent vulnerabilities

(Appears in the following advisories)

• 9125471853816748094

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-1633
• CVE-2022-1634
• CVE-2022-1635
• CVE-2022-1636
• CVE-2022-1637
• CVE-2022-1638
• CVE-2022-1639
• CVE-2022-1640

Frequently Asked Questions

• What is the vulnerability ID for this vulnerability?

  The vulnerability ID for this vulnerability is CVE-2022-1641.

• What is the severity level of CVE-2022-1641?

  The severity level of CVE-2022-1641 is high, with a severity value of 8.8.

• What software is affected by CVE-2022-1641?

  Google Chrome on Chrome OS prior to version 101.0.4951.64 is affected by CVE-2022-1641.

• How can a remote attacker exploit CVE-2022-1641?

  A remote attacker who convinces a user to engage in specific UI interactions can potentially exploit heap corruption via specific user interaction in Web UI Diagnostics in Google Chrome on Chrome OS prior to version 101.0.4951.64.

• Where can I find more information about CVE-2022-1641?

  You can find more information about CVE-2022-1641 at the following references: [link1], [link2], [link3].