CVE-2022-3842

Description

Use after free in Passwords in Google Chrome prior to 105.0.5195.125 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Reserved 2022-11-02 | Published 2023-01-02 | Updated 2024-10-22 | Assigner Chrome

Problem types

Use after free

Product status

Any version before 105.0.5195.125
affected

References

chromereleases.googleblog.com/...-update-for-desktop_14.html

crbug.com/1352445

cve.org (CVE-2022-3842)

nvd.nist.gov (CVE-2022-3842)

Download JSON