CVE-2022-3058: Use after free in Sign-In Flow
Published Jun 20, 2022
·Updated
Use after free in Sign-In Flow in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interaction.
Credit
raven at KunLun lab
Affected Software
3 affected componentsFixes available
Google Chrome<105.0.5195.52
105.0.5195.52
Google Chrome<105.0.5195.52
fedoraproject fedora=37
Remediation
Event History
Jun 20, 2022
CVE Published
12:00 AM
Sep 26, 2022
CVE Published
via MITRE·03:01 PM
Data Sourced
via MITRE·03:01 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2022-3058?
CVE-2022-3058 is rated as a high severity vulnerability due to potential heap corruption exploit.
2
How do I fix CVE-2022-3058?
To fix CVE-2022-3058, update Google Chrome to version 105.0.5195.52 or later.
3
What types of software are affected by CVE-2022-3058?
CVE-2022-3058 affects Google Chrome versions prior to 105.0.5195.52 and Fedora 37.
4
What does CVE-2022-3058 exploit?
CVE-2022-3058 can be exploited through specific UI interactions that lead to a use after free vulnerability.
5
Who can be affected by CVE-2022-3058?
Any user engaging with affected versions of Google Chrome or Fedora could potentially be impacted by CVE-2022-3058.