deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-24968
Published: 2022-02-11
Description: In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their control without causing TLS certificate verification to fail. This occurs because the wrong host name is selected during this verification.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://mellium.im/cve/cve-2022-24968/; https://mellium.im/xmpp/; https://mellium.im/cve/cve-2022-24968/
CVE: CVE-2021-4098
Published: 2022-02-11
Description: Insufficient data validation in Mojo in Google Chrome prior to 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS Score: 7.4 (HIGH)
CWE: CWE-367, CWE-787
References: https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html; https://crbug.com/1263457; https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html
CVE: CVE-2021-4099
Published: 2022-02-11
Description: Use after free in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html; https://crbug.com/1270658; https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html
CVE: CVE-2021-4100
Published: 2022-02-11
Description: Object lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-787
References: https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html; https://crbug.com/1272068; https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html
CVE: CVE-2021-4101
Published: 2022-02-11
Description: Heap buffer overflow in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html; https://crbug.com/1262080; https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html
CVE: CVE-2021-4102
Published: 2022-02-11
Description: Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html; https://crbug.com/1278387; https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html
CVE: CVE-2022-0096
Published: 2022-02-12
Description: Use after free in Storage in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1275020; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0097
Published: 2022-02-12
Description: Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page.
CVSS Score: 9.6 (CRITICAL)
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1117173; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0098
Published: 2022-02-12
Description: Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gestures.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1273609; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0099
Published: 2022-02-12
Description: Use after free in Sign-in in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gesture.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1245629; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0100
Published: 2022-02-12
Description: Heap buffer overflow in Media streams API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1238209; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0101
Published: 2022-02-12
Description: Heap buffer overflow in Bookmarks in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via specific user gesture.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1249426; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0102
Published: 2022-02-12
Description: Type confusion in V8 in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1260129; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0103
Published: 2022-02-12
Description: Use after free in SwiftShader in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1272266; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0104
Published: 2022-02-12
Description: Heap buffer overflow in ANGLE in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1273661; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0105
Published: 2022-02-12
Description: Use after free in PDF Accessibility in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1274376; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0106
Published: 2022-02-12
Description: Use after free in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1278960; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0107
Published: 2022-02-12
Description: Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1248438; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0108
Published: 2022-02-12
Description: Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-346
References: http://www.openwall.com/lists/oss-security/2023/04/21/3; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1248444
CVE: CVE-2022-0109
Published: 2022-02-12
Description: Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1261689; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0110
Published: 2022-02-12
Description: Incorrect security UI in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1237310; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0111
Published: 2022-02-12
Description: Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to incorrectly set origin via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-346
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1241188; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0112
Published: 2022-02-12
Description: Incorrect security UI in Browser UI in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to display missing URL or incorrect URL via a crafted URL.
CVSS Score: 4.3 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1255713; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0113
Published: 2022-02-12
Description: Inappropriate implementation in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-346
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1039885; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0114
Published: 2022-02-12
Description: Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1267627; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0115
Published: 2022-02-12
Description: Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-908
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1268903; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0116
Published: 2022-02-12
Description: Inappropriate implementation in Compositing in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 4.3 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1272250; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0117
Published: 2022-02-12
Description: Policy bypass in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1115847; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0118
Published: 2022-02-12
Description: Inappropriate implementation in WebShare in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially hide the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 4.3 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1238631; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0120
Published: 2022-02-12
Description: Inappropriate implementation in Passwords in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially leak cross-origin data via a malicious website.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-346
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html; https://crbug.com/1262953; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/
CVE: CVE-2022-0289
Published: 2022-02-12
Description: Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://packetstormsecurity.com/files/166547/Chrome-safe_browsing-ThreatDetails-OnReceivedThreatDOMDetails-Use-After-Free.html; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1284367
CVE: CVE-2022-0290
Published: 2022-02-12
Description: Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-416
References: http://packetstormsecurity.com/files/166080/Chrome-RenderFrameHostImpl-Use-After-Free.html; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1260134
CVE: CVE-2022-0291
Published: 2022-02-12
Description: Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1281084; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html
CVE: CVE-2022-0292
Published: 2022-02-12
Description: Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1270358; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html
CVE: CVE-2022-0293
Published: 2022-02-12
Description: Use after free in Web packaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1283371; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html
CVE: CVE-2022-0294
Published: 2022-02-12
Description: Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1273017; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html
CVE: CVE-2022-0295
Published: 2022-02-12
Description: Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1278180; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html
CVE: CVE-2022-0296
Published: 2022-02-12
Description: Use after free in Printing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1283375; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html
CVE: CVE-2022-0297
Published: 2022-02-12
Description: Use after free in Vulkan in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1274316; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html
CVE: CVE-2022-0298
Published: 2022-02-12
Description: Use after free in Scheduling in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1212957; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html
CVE: CVE-2022-0300
Published: 2022-02-12
Description: Use after free in Text Input Method Editor in Google Chrome on Android prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1275438; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html
CVE: CVE-2022-0301
Published: 2022-02-12
Description: Heap buffer overflow in DevTools in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1276331; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html
CVE: CVE-2022-0302
Published: 2022-02-12
Description: Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1278613; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html
CVE: CVE-2022-0304
Published: 2022-02-12
Description: Use after free in Bookmarks in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1282118; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html
CVE: CVE-2022-0305
Published: 2022-02-12
Description: Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1282354; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html
CVE: CVE-2022-0306
Published: 2022-02-12
Description: Heap buffer overflow in PDFium in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/166367/Chrome-chrome_pdf-PDFiumEngine-RequestThumbnail-Heap-Buffer-Overflow.html; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1283198
CVE: CVE-2022-0307
Published: 2022-02-12
Description: Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html; https://crbug.com/1281881; https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html