CVE-2022-1489

PoC —

CVSS 3.1

8.8 high

EPSS

<1%p61

Published

Jul 26, 2022 (Jul 26, 2022)

Modified

Jun 17, 2026

Description

Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.

Vendors: google
Products: chrome
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.