CVE-2022-3038

Product

Google / Chromium Network Service

Vulnerability

Google Chromium Network Service Use-After-Free Vulnerability

Added to KEV

Mar 30, 2023

Remediate by

Apr 20, 2023

Known ransomware use

No

Summary description

Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Required action

Apply updates per vendor instructions.

Notes

https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_30.html; https://nvd.nist.gov/vuln/detail/CVE-2022-3038