CVE-2022-3038

Producto

Google / Chromium Network Service

Vulnerabilidad

Google Chromium Network Service Use-After-Free Vulnerability

Añadido a KEV

30 mar 2023

Remediar antes de

20 abr 2023

Uso conocido en ransomware

No

Descripción resumida

Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Acción requerida

Apply updates per vendor instructions.

Notas

https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_30.html; https://nvd.nist.gov/vuln/detail/CVE-2022-3038