CVE-2022-0604

CVSS 3.1: 8.8 high
EPSS: <1%p49
Published: Apr 5, 2022 · Apr 5, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-0604 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.

Vendors: google

Products: chrome

Weakness: CWE-787

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

1 story

Google fixes a Chrome zero

Security AffairsFeb 15, 10:20 UTC · Feb 15, 2022Exploit / PoCExploitedCVE-2022-0609 CVE-2022-0603 CVE-2022-0604+52 · 1 read