In CISA KEV9.6 Critical
CVE-2022-4135
Google Chromium GPU Heap Buffer Overflow Vulnerability
GoogleChromium GPU
Status
- Exploited in the wild
- In CISA KEV since 28 Nov 2022
- Vendor fix available
Federal deadlineMon 19 Dec 2022, 23:59 UTC
Passed 1405 days ago
CISA KEV · added 28 Nov 2022
Exploit probabilityEPSSchecked 24 Oct
32%probability of exploitation in the next 30 days
Higher than 98% of scored CVEs
SeverityCVSS
9.6Critical
Description NVD
Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CISA required action
Apply updates per vendor instructions.
Coverage 1 article · 1 outlet
- Spyware vendors use 0-days and n-days against popular platformsblog.google · first in our coverage · mentions it in passing