In CISA KEV8.8 High
CVE-2022-3723
Google Chromium V8 Type Confusion Vulnerability
GoogleChromium V8
Status
- Exploited in the wild
- In CISA KEV since 28 Oct 2022
- Vendor fix available
Federal deadlineFri 18 Nov 2022, 23:59 UTC
Passed 1436 days ago
CISA KEV · added 28 Oct 2022
Exploit probabilityEPSSchecked 24 Oct
7.9%probability of exploitation in the next 30 days
Higher than 95% of scored CVEs
SeverityCVSS
8.8High
Description NVD
Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CISA required action
Apply updates per vendor instructions.
Coverage 1 article · 1 outlet
- Spyware vendors use 0-days and n-days against popular platformsblog.google · first in our coverage · mentions it in passing