CVE-2022-3038

Produto

Google / Chromium Network Service

Vulnerabilidade

Google Chromium Network Service Use-After-Free Vulnerability

Adicionado ao KEV

30 de mar. de 2023

Corrigir até

20 de abr. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Ação necessária

Apply updates per vendor instructions.

Notas

https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_30.html; https://nvd.nist.gov/vuln/detail/CVE-2022-3038