Unscored CVE-2022-4452 EUVD-2022-51796GHSA-h4hp-v87j-c7fw

Insufficient data validation in crosvm in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit object corr…

Published Aug 25, 2023 · Updated Aug 3, 2024 · Assigned by Chrome

Vendor: Google Product: Chrome Category: Browsers

Description

Insufficient data validation in crosvm in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)

Affected products

Vendor	Product	Affected	Fixed
Google	Chrome	107.0.5304.62 – < 107.0.5304.62	107.0.5304.62

Advisories 1

WID-SEC-2023-0574 Android Patchday März 2023 BSI CERT-Bund (WID) · Jun 18, 2023

References

https://bugs.chromium.org/p/chromium/issues/detail?id=1372457
https://crbug.com/1372457