CVE-2022-2743: Integer overflow in Window Manager
Integer overflow in Window Manager in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to perform an out of bounds memory write via crafted UI interactions. (Chrome security severity: High)
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2022-2603
- CVE-2022-2604
- CVE-2022-2605
- CVE-2022-2606
- CVE-2022-2607
- CVE-2022-2608
- CVE-2022-2609
- CVE-2022-2742
- CVE-2022-2610
- CVE-2022-2611
- CVE-2022-2612
- CVE-2022-2613
- CVE-2022-2614
- CVE-2022-4914
- CVE-2022-2615
- CVE-2022-2616
- CVE-2022-2617
- CVE-2022-2618
- CVE-2022-2619
- CVE-2022-2620
- CVE-2022-2621
- CVE-2022-2622
- CVE-2022-2623
- CVE-2022-2624
Frequently Asked Questions
What is the vulnerability ID for this Chrome OS and Lacros vulnerability?
The vulnerability ID for this Chrome OS and Lacros vulnerability is CVE-2022-2743.
What is the severity level of CVE-2022-2743?
The severity level of CVE-2022-2743 is High.
What is the affected software for CVE-2022-2743?
The affected software for CVE-2022-2743 is Google Chrome on Chrome OS and Lacros versions prior to 104.0.5112.79.
How can a remote attacker exploit CVE-2022-2743?
A remote attacker can exploit CVE-2022-2743 by convincing a user to engage in specific UI interactions to perform an out of bounds memory write via crafted UI interactions.
Are there any reference links for CVE-2022-2743?
Yes, you can find more information about CVE-2022-2743 at the following links: [Link 1](https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html), [Link 2](https://crbug.com/1316960).