CVE-2022-1364

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products

Alt Linux, Astra Linux, Brave, Google Chrome, Edge, Opera, Suse, V8 Javascript Engine

Google Chrome

< 100.0.4896.127

Fix

Available

CVSS 3.1

8.8 HIGH

EPSS

13.7% (96th percentile)

Weakness

CWE-843

NVD status

Analyzed

Published

2022-07-26