CVE-2022-4262: Type Confusion in V8
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Other sources
Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 108.0.5359.94 - Upgrade
Upgrade
alpine/qt5-qtwebengineto a version that resolves this vulnerability.Fixed in 5.15.11-r8 - Upgrade
Upgrade
alpine/qt5-qtwebengineto a version that resolves this vulnerability.Fixed in 5.15.11-r9 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 108.0.5359.94-1 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1
Event History
Frequently Asked Questions
What is CVE-2022-4262?
CVE-2022-4262 is a type confusion vulnerability in the V8 engine used by Google Chrome.
What is the severity of CVE-2022-4262?
The severity of CVE-2022-4262 is High with a severity score of 8.8.
How does CVE-2022-4262 work?
CVE-2022-4262 allows a remote attacker to potentially exploit heap corruption by tricking a victim into visiting a specially crafted HTML page.
Which versions of Google Chrome are affected by CVE-2022-4262?
Google Chrome versions up to and excluding 108.0.5359.94 are affected by CVE-2022-4262.
How can I fix CVE-2022-4262?
To fix CVE-2022-4262, update Google Chrome to version 108.0.5359.94 or later.