Skip to content
OpenAdvisories
Unscored CVE-2022-3652 EUVD-2022-43011GHSA-rpqg-gc44-45f5

Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted…

Published Nov 1, 2022 · Updated Nov 12, 2024 · Assigned by Chrome

Description

Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 107.0.5304.62 107.0.5304.62

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 107.0.5304.68-1 —
Debian 13 chromium 107.0.5304.68-1 —
Debian 12 chromium 107.0.5304.68-1 —
Debian 11 chromium 107.0.5304.68-1~deb11u1 DSA-5261-1
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS chromium-browser 107.0.5304.87-0ubuntu11.18.04.1 —
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP4 chromium 107.0.5304.87-bp154.2.40.1 openSUSE-SU-2022:10180-1
SUSE Package Hub 15 SP3 chromium 107.0.5304.87-bp153.2.133.1 openSUSE-SU-2022:10177-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 107.0.5304.87-1.1 openSUSE-SU-2024:12948-1, openSUSE-SU-2024:12460-1
openSUSE Leap 15.4 chromium 107.0.5304.87-bp154.2.40.1 openSUSE-SU-2022:10180-1
openSUSE Leap 15.3 chromium 107.0.5304.87-bp153.2.133.1 openSUSE-SU-2022:10177-1

Advisories 6

References