CVE-2022-2294

תיאור (מקור, אנגלית)

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

מדדים

CVSS 3.1

8.8 (HIGH) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

70% (אחוזון 100) נכון ל-25/7/2026

CWE

CWE-787

מוצרים מושפעים

google: chrome; fedoraproject: extra packages for enterprise linux; fedoraproject: fedora; webkitgtk: webkitgtk; wpewebkit: wpe webkit; apple: ipados; apple: iphone os; apple: mac os x; apple: macos; apple: tvos; apple: watchos; webrtc_project: webrtc

קישורים

• https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-deskto‮… Release NotesVendor Advisory
• https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-deskto‮… Release NotesVendor Advisory
• http://www.openwall.com/lists/oss-security/2022/07/28/2 Mailing ListThird Party Advisory
• https://crbug.com/1341043 Permissions Required
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮… Broken Link
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮… Broken Link
• https://security.gentoo.org/glsa/202208-35 Third Party Advisory
• https://security.gentoo.org/glsa/202208-39 Third Party Advisory
• https://security.gentoo.org/glsa/202311-11 Third Party Advisory
• http://www.openwall.com/lists/oss-security/2022/07/28/2 Mailing ListThird Party Advisory