First published: Sat Jan 29 2022(Updated: )
Use after free in Tablet Mode in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific user interactions.
Credit: chrome-cve-admin@google.com @ginggilBesel
Affected Software | Affected Version | How to fix |
---|---|---|
Google Chrome (Trace Event) | <102.0.5005.61 | 102.0.5005.61 |
Google Chrome (Trace Event) | <102.0.5005.61 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2022-1866 has a high severity rating due to its potential for remote exploitation and heap corruption.
To fix CVE-2022-1866, update Google Chrome to version 102.0.5005.61 or later.
CVE-2022-1866 is caused by a use after free vulnerability in Tablet Mode in Google Chrome on Chrome OS.
CVE-2022-1866 affects Google Chrome versions prior to 102.0.5005.61 on Chrome OS.
Yes, CVE-2022-1866 can be exploited remotely if a user engages in specific interactions.