CVE-2022-3039: Use after free in WebSQL

Q: What is CVE-2022-3039?

CVE-2022-3039 is a vulnerability known as Use after free in WebSQL in Google Chrome prior to 105.0.5195.52.

Q: How can a remote attacker exploit CVE-2022-3039?

A remote attacker can potentially exploit heap corruption via a crafted HTML page.

Q: What is the severity level of CVE-2022-3039?

CVE-2022-3039 has a severity level of 8.8, which is considered high.

Q: Which software versions are affected by CVE-2022-3039?

Google Chrome versions prior to 105.0.5195.52 and Fedora 37 are affected by CVE-2022-3039.

Q: How can I fix CVE-2022-3039?

To fix CVE-2022-3039, you should update Google Chrome to version 105.0.5195.52 or higher.

Published Jul 11, 2022

Updated

Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Credit

Nan Wang@@eternalsakura13(360 Vulnerability Research Institute), Guang Gong(360 Vulnerability Research Institute)

Affected Software

7 affected componentsFixes available

Google Chrome<105.0.5195.52

105.0.5195.52

Google Chrome<105.0.5195.52

Fedoraproject Fedora=37

debian/chromium<105.0.5195.52-1

105.0.5195.52-1

debian/chromium<105.0.5195.52-1

105.0.5195.52-1

debian/chromium<105.0.5195.52-1

105.0.5195.52-1

debian/chromium

150.0.7871.100-1~deb12u1156.0.8078.79-1~deb12u1150.0.7871.181-1~deb13u1156.0.8078.79-1~deb13u1156.0.8078.79-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Google Chrome (Trace Event) to a version that resolves this vulnerability.
Fixed in 105.0.5195.52
Upgrade
Upgrade debian/chromium to a version that resolves this vulnerability.
Fixed in 105.0.5195.52-1
Upgrade
Upgrade debian/chromium to a version that resolves this vulnerability.
Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1

Event History

Jul 11, 2022

CVE Published

12:00 AM

Sep 26, 2022

CVE Published

via MITRE·03:01 PM

Data Sourced

via MITRE·03:01 PM

DescriptionWeakness

Data Sourced

via OSV·04:15 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2022-3039?

CVE-2022-3039 is a vulnerability known as Use after free in WebSQL in Google Chrome prior to 105.0.5195.52.

How can a remote attacker exploit CVE-2022-3039?

A remote attacker can potentially exploit heap corruption via a crafted HTML page.

What is the severity level of CVE-2022-3039?

CVE-2022-3039 has a severity level of 8.8, which is considered high.

Which software versions are affected by CVE-2022-3039?

Google Chrome versions prior to 105.0.5195.52 and Fedora 37 are affected by CVE-2022-3039.

How can I fix CVE-2022-3039?

To fix CVE-2022-3039, you should update Google Chrome to version 105.0.5195.52 or higher.

CVE-2022-3039: Use after free in WebSQL

Credit

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is CVE-2022-3039?

How can a remote attacker exploit CVE-2022-3039?

What is the severity level of CVE-2022-3039?

Which software versions are affected by CVE-2022-3039?

How can I fix CVE-2022-3039?

Company

Resources

Contact