CVE-2022-1635 in Chrome

Riassunto

di MITRE • 27/07/2022

Use after free in Permission Prompts in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific user interactions.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 09/05/2022
• Divulgazione: 27/07/2022
• Moderazione: accettato
• Voce: VDB-199817
• CPE: pronto
• CWE: CWE-416 (confermato)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00782
• KEV: no
• Attività: molto basso
• Settore: Telecommunication, Finance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-1635
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-1635
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-1635/