Vulnerabilitycritical

Google Releases Chrome Patch to Fix New Zero

Infosecurity Magazineby Alessandro MascellinoNov 25, 2022 · 17:15 UTC (Nov 25, 2022)1 min read3 · 1 read

Read at infosecurity-magazine.com

Analyze CVE-2022-4135 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-4135 CVE-2022-2294

Tags: cve-2022-4135 cve-2022-2294 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-2294	Heap Buffer Overflow in Google Chrome WebRTC Exploited in the Wild	8.8	71%	KEVRansomware	Jul 28, 2022 KEV Aug 25, 2022
CVE-2022-4135	Chromium GPU heap buffer overflow enables sandbox escape (affects Chrome, Edge, Opera)	9.6	32%	KEVPoC	Nov 25, 2022 KEV Nov 28, 2022

From the original article

1 min read at infosecurity-magazine.com

Google released new software patches on Thursday to address a new zero-day vulnerability in its Chrome web browser. Writing in a security bulletin , the tech giant described the high-severity vulnerability (tracked CVE-2022-4135) as a heap buffer overflow in the graphics processing unit (GPU) component.

Infosecurity Magazine

By Alessandro Mascellino · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.