CVE-2022-2859 - Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions

Back Back to CVE browser

HIGH

Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions

Published Sep 26, 2022

8.8

HIGH

CVSS 3.1

EPSS 0.92%

Description

Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions.

Affected products

Vendor Google Product Chrome Default
unknown
Affected
- ≥ unspecified, < 104.0.5112.101

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Google	Chrome	unknown	Affected ≥ unspecified, < 104.0.5112.101

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (4)

https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html
x_refsource_MISCPatchRelease NotesVendor Advisory
https://crbug.com/1338412
x_refsource_MISCPermissions RequiredVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-35093
Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
vendor-advisoryx_refsource_FEDORA

Link	Providers	Tags
https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html		x_refsource_MISCPatchRelease NotesVendor Advisory
https://crbug.com/1338412		x_refsource_MISCPermissions RequiredVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-35093		Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/		vendor-advisoryx_refsource_FEDORA

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Chrome

Published Sep 26, 2022

Updated May 21, 2025

Reserved Aug 16, 2022

Link CVE-2022-2859

CISA Vulnrichment

Updated May 21, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-2859

Red Hat

No data

ENISA EUVD

Assigner Chrome

Published Sep 26, 2022

Updated May 21, 2025

Link EUVD-2022-35093

GitHub

No data