CVE-2022-4177 | BDVDB-2026-189508 Detail

GoogleChrome

Description#

Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install an extension to potentially exploit heap corruption via a crafted Chrome Extension and UI interaction. (Chromium security severity: High)

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html
https://crbug.com/1379242
https://security.gentoo.org/glsa/202305-10
https://security.gentoo.org/glsa/202311-11

Exploit#

No public exploit known

History#

Version 12022-11-29Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.