CVE-2022-3071: Use after free in Tab Strip
Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interaction.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for the use after free vulnerability in Google Chrome on Chrome OS Lacros?
The vulnerability ID for the use after free vulnerability in Google Chrome on Chrome OS Lacros is CVE-2022-3071.
What is the severity of CVE-2022-3071?
The severity of CVE-2022-3071 is high with a CVSS score of 8.8.
Which software versions are affected by CVE-2022-3071?
Google Chrome on Chrome OS, Lacros prior to version 105.0.5195.52 is affected by CVE-2022-3071.
How can a remote attacker potentially exploit CVE-2022-3071?
A remote attacker can potentially exploit CVE-2022-3071 by convincing a user to engage in specific UI interactions that lead to heap corruption via crafted UI interaction.
How can I fix the use after free vulnerability CVE-2022-3071?
To fix the use after free vulnerability CVE-2022-3071, update Google Chrome on Chrome OS, Lacros to version 105.0.5195.52 or later.