CVE-2022-3370

CVSS 3.1: 8.8 high
EPSS: <1%p57
Published: Nov 1, 2022 · Nov 1, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-3370 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendors: google

Products: chrome

Weakness: CWE-416

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news

1 story

Microsoft Patch Tuesday for October 2022 — Snort rules and prominent vulnerabilities

Cisco TalosOct 11, 18:01 UTC · Oct 11, 2022VulnerabilityCVE-2022-41038 CVE-2022-37968 CVE-2022-37976+232