Vulnerabilitycritical
Google Chrome 'SymStealer' Vulnerability Could Affect 2.5 Billion Users
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-3656 | Insufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass file system restrictions via a crafted… | 8.8 | 2% | ||
| CVE-2022-4135 | Chromium GPU heap buffer overflow enables sandbox escape (affects Chrome, Edge, Opera) | 9.6 | 32% | KEVPoC | KEV |
From the original article
2 min read at infosecurity-magazine.com
The Chromium vulnerability (tracked CVE-2022-3656) discovered by Imperva security researchers in July 2022 and patched in September could still affect 2. 5 billion users if they don't update their browsers. The warning comes from Imperva's security researcher Ron Masas, who published a blog post about the flaw (commonly known as “SymStealer") on Wednesday.
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.