CVE-2022-3887

Description

Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Reserved 2022-11-08 | Published 2022-11-09 | Updated 2024-10-23 | Assigner Chrome

Problem types

Use after free

Product status

Any version before 107.0.5304.106
affected

References

chromereleases.googleblog.com/...nel-update-for-desktop.html

crbug.com/1372695

www.debian.org/security/2022/dsa-5275 (DSA-5275) vendor-advisory

cve.org (CVE-2022-3887)

nvd.nist.gov (CVE-2022-3887)

Download JSON