Skip to content
OpenAdvisories
Unscored CVE-2022-2607 EUVD-2022-34854GHSA-xfw5-333j-65xg

Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage i…

Published Aug 12, 2022 · Updated Aug 3, 2024 · Assigned by Chrome

Description

Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 104.0.5112.79 104.0.5112.79

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 104.0.5112.79-1 —
Debian 13 chromium 104.0.5112.79-1 —
Debian 12 chromium 104.0.5112.79-1 —
Debian 11 chromium 104.0.5112.79-1~deb11u1 DSA-5201-1
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS chromium-browser 104.0.5112.101-0ubuntu0.18.04.1 —
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP4 chromium 104.0.5112.79-bp154.2.20.1 openSUSE-SU-2022:10086-1
SUSE Package Hub 15 SP3 chromium 104.0.5112.79-bp153.2.113.1 openSUSE-SU-2022:10092-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 104.0.5112.79-1.1 openSUSE-SU-2024:12948-1, openSUSE-SU-2024:12251-1
openSUSE Leap 15.4 chromium 104.0.5112.79-bp154.2.20.1 openSUSE-SU-2022:10086-1
openSUSE Leap 15.3 chromium 104.0.5112.79-bp153.2.113.1 openSUSE-SU-2022:10092-1

Advisories 5

References