CVE-2022-3075
Google Chromium Mojo Insufficient Data Validation Vulnerability
CVSS
—
No CVSS
EPSS
5.8%
p93
KEV
YES
Sep 8, 2022
Exploit Today
78
0-100
Published: — · Last modified: —
Product
Google / Chromium Mojo
Vulnerability
Google Chromium Mojo Insufficient Data Validation Vulnerability
Added to KEV
Sep 8, 2022
Remediate by
Sep 29, 2022
Known ransomware use
No
Summary description
Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Required action
Apply updates per vendor instructions.
Notes
https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop.html, https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3075; https://nvd.nist.gov/vuln/detail/CVE-2022-3075