CVE-2022-4262
Google Chromium V8 Type Confusion Vulnerability
CVSS
—
No CVSS
EPSS
16.1%
p97
KEV
YES
Dec 5, 2022
Exploit Today
79
0-100
Published: — · Last modified: —
Product
Google / Chromium V8
Vulnerability
Google Chromium V8 Type Confusion Vulnerability
Added to KEV
Dec 5, 2022
Remediate by
Dec 26, 2022
Known ransomware use
No
Summary description
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Required action
Apply updates per vendor instructions.
Notes
https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop.html; https://nvd.nist.gov/vuln/detail/CVE-2022-4262