CVE-2022-2477: Use after free in Guest View
Use after free in Guest View in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2022-2477?
CVE-2022-2477 has a high severity rating due to its potential for heap corruption and exploitation by malicious extensions.
How do I fix CVE-2022-2477?
To fix CVE-2022-2477, upgrade Google Chrome to version 103.0.5060.134 or later.
What type of attack does CVE-2022-2477 facilitate?
CVE-2022-2477 facilitates an attack that can exploit heap corruption through a crafted HTML page.
Is CVE-2022-2477 specific to certain versions of Chrome?
Yes, CVE-2022-2477 affects Google Chrome versions prior to 103.0.5060.134.
What does 'use after free' mean in the context of CVE-2022-2477?
In the context of CVE-2022-2477, 'use after free' refers to a vulnerability where the application continues to use a memory location after it has been freed, potentially leading to undefined behavior and security risks.