CVE-2022-2295: Type Confusion in V8
Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 103.0.5060.114 - Upgrade
Upgrade
alpine/chromiumto a version that resolves this vulnerability.Fixed in 103.0.5060.114-r0 - Upgrade
Upgrade
alpine/qt5-qtwebengineto a version that resolves this vulnerability.Fixed in 5.15.3_git20220505-r2 - Upgrade
Upgrade
alpine/qt5-qtwebengineto a version that resolves this vulnerability.Fixed in 5.15.3_git20220601-r1 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 103.0.5060.114-1 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-2295.
What is the severity of CVE-2022-2295?
The severity of CVE-2022-2295 is high.
How does the vulnerability CVE-2022-2295 occur?
The vulnerability CVE-2022-2295 occurs due to type confusion in V8 in Google Chrome.
How can an attacker potentially exploit CVE-2022-2295?
An attacker can potentially exploit CVE-2022-2295 by using a crafted HTML page to cause heap corruption.
How can I fix the vulnerability CVE-2022-2295?
To fix the vulnerability CVE-2022-2295, update Google Chrome to version 103.0.5060.114 or later.