CVE-2022-3038: Use after free in Network Service
Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Other sources
Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 105.0.5195.52
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2022-3038?
CVE-2022-3038 has a medium severity rating due to its potential to exploit heap corruption.
How do I fix CVE-2022-3038?
To fix CVE-2022-3038, update Google Chrome to version 105.0.5195.52 or later.
Which software is affected by CVE-2022-3038?
CVE-2022-3038 affects multiple web browsers that utilize Chromium, particularly Google Chrome versions up to 105.0.5195.52.
Can CVE-2022-3038 be exploited remotely?
Yes, CVE-2022-3038 can be exploited remotely via a crafted HTML page that triggers the use-after-free vulnerability.
What type of vulnerability is CVE-2022-3038?
CVE-2022-3038 is classified as a use-after-free vulnerability in the Google Chromium Network Service.