Skip to content
OpenAdvisories
High · 8.8 CVE-2022-3055 EUVD-2022-42487GHSA-8r7r-5qgr-54w2

Use after free in Passwords in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI…

Published Sep 26, 2022 · Updated May 21, 2025 · Assigned by Chrome

Description

Use after free in Passwords in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 105.0.5195.52 105.0.5195.52

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 105.0.5195.52-1 —
Debian 13 chromium 105.0.5195.52-1 —
Debian 12 chromium 105.0.5195.52-1 —
Debian 11 chromium 105.0.5195.52-1~deb11u1 DSA-5223-1
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS chromium-browser 105.0.5195.102-0ubuntu0.18.04.1 —
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP4 chromium 105.0.5195.102-bp154.2.26.1 openSUSE-SU-2022:10119-1
SUSE Package Hub 15 SP3 chromium 105.0.5195.102-bp153.2.119.1 openSUSE-SU-2022:10120-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 105.0.5195.102-1.1 openSUSE-SU-2024:12948-1, openSUSE-SU-2024:12319-1
openSUSE Leap 15.4 chromium 105.0.5195.102-bp154.2.26.1 openSUSE-SU-2022:10119-1
openSUSE Leap 15.3 chromium 105.0.5195.102-bp153.2.119.1 openSUSE-SU-2022:10120-1

Advisories 6

References