CVE-2022-0306: vulnerability in Google Chrome
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
A memory error in PDFium (PDF viewer in Chrome) allows attackers to crash your browser or potentially execute malicious code by tricking you into viewing a specially crafted webpage.
Heap buffer overflow in PDFium's PDF parsing module affects Chrome versions before 97.0.4692.99. Remote attack vector via crafted HTML/PDF content; no user privileges required. Potential for arbitrary code execution or denial of service through heap memory corruption.
In the same product, most dangerous first.