CVE-2022-1364
CVE-2022-1364
In short
Google Chrome's JavaScript engine had a flaw where it could get confused about what type of data it was handling, allowing attackers to corrupt memory through a malicious webpage. This could lead to crashes or worse if an attacker finds the right way to exploit it.
Technical detail
Type confusion vulnerability in V8's Turbofan JIT compiler allows remote attackers to cause heap corruption via crafted HTML pages. The vulnerability results from improper type tracking during optimization, enabling potential arbitrary code execution when heap exploitation techniques are chained. Affects Chrome versions prior to 100.0.4896.127.
Summary generated and translated by AI from the official description.
Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Google · Chromepublic PoCs found — 2
githubgithub.com/interruptlabs/uc_browser_poc_CVE-2022-1364★ 13githubgithub.com/A1Lin/cve-2022-1364★ 2⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →