CVE-2022-3659: Use after free in Accessibility
Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. (Chromium security severity: Medium)
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 107.0.5304.62 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 107.0.5304.68-1 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-3659.
What is the severity level of CVE-2022-3659?
The severity level of CVE-2022-3659 is high (8.8 out of 10).
What is the affected software for CVE-2022-3659?
The affected software for CVE-2022-3659 is Google Chrome on Chrome OS prior to version 107.0.5304.62.
How can an attacker exploit CVE-2022-3659?
An attacker can exploit CVE-2022-3659 by convincing a user to engage in specific UI interactions, potentially leading to heap corruption.
How can CVE-2022-3659 be fixed?
CVE-2022-3659 can be fixed by updating Google Chrome on Chrome OS to version 107.0.5304.62 or later.