deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-42791
Published: 2022-11-01
Description: A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-362
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/kb/HT213446; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-42793
Published: 2022-11-01
Description: An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. An app may be able to bypass code signing checks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-347, CWE-347
References: https://support.apple.com/en-us/HT213443; https://support.apple.com/en-us/HT213444; https://support.apple.com/en-us/HT213445
CVE: CVE-2022-42795
Published: 2022-11-01
Description: A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS Ventura 13, watchOS 9. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213446; https://support.apple.com/en-us/HT213486; https://support.apple.com/en-us/HT213487
CVE: CVE-2022-42796
Published: 2022-11-01
Description: This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.7 and iPadOS 15.7, macOS Ventura 13. An app may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT213445; https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213445
CVE: CVE-2022-42798
Published: 2022-11-01
Description: The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. Parsing a maliciously crafted audio file may lead to disclosure of user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213490
CVE: CVE-2022-42799
Published: 2022-11-01
Description: The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiting a malicious website may lead to user interface spoofing.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1021, CWE-1021
References: http://www.openwall.com/lists/oss-security/2022/11/04/4; https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/
CVE: CVE-2022-42800
Published: 2022-11-01
Description: This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A user may be able to cause unexpected app termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213490
CVE: CVE-2022-42801
Published: 2022-11-01
Description: A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: http://packetstormsecurity.com/files/170011/XNU-vm_object-Use-After-Free.html; https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489
CVE: CVE-2022-42803
Published: 2022-11-01
Description: A race condition was addressed with improved locking. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-362
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213490
CVE: CVE-2022-42806
Published: 2022-11-01
Description: A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-362
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-42808
Published: 2022-11-01
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. A remote user may be able to cause kernel code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213491
CVE: CVE-2022-42809
Published: 2022-11-01
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted gcx file may lead to unexpected app termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-42810
Published: 2022-11-01
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13. Processing a maliciously crafted USD file may disclose memory contents.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213490
CVE: CVE-2022-42811
Published: 2022-11-01
Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213491
CVE: CVE-2022-42813
Published: 2022-11-01
Description: A certificate validation issue existed in the handling of WKWebView. This issue was addressed with improved validation. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. Processing a maliciously crafted certificate may lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-295, CWE-295
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213491
CVE: CVE-2022-42814
Published: 2022-11-01
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-42815
Published: 2022-11-01
Description: This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-42817
Published: 2022-11-01
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, watchOS 9.1. Visiting a maliciously crafted website may leak sensitive data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213490; https://support.apple.com/en-us/HT213491
CVE: CVE-2022-42818
Published: 2022-11-01
Description: This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. A user in a privileged network position may be able to track user activity.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/kb/HT213444; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-42819
Published: 2022-11-01
Description: An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may be able to read sensitive location information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213443; https://support.apple.com/en-us/HT213444; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-42820
Published: 2022-11-01
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app may cause unexpected app termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-42823
Published: 2022-11-01
Description: A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: http://www.openwall.com/lists/oss-security/2022/11/04/4; https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/
CVE: CVE-2022-42824
Published: 2022-11-01
Description: A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information.
CVSS Score: 5.5 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2022/11/04/4; https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/
CVE: CVE-2022-42825
Published: 2022-11-01
Description: This issue was addressed by removing additional entitlements. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-266
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213491
CVE: CVE-2022-42827
Published: 2022-11-01
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213490; https://support.apple.com/en-us/HT213489
CVE: CVE-2022-42829
Published: 2022-11-01
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-42830
Published: 2022-11-01
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-42831
Published: 2022-11-01
Description: A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-42832
Published: 2022-11-01
Description: A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-27582
Published: 2022-11-01
Description: Password recovery vulnerability in SICK SIM4000 (PPC) Partnumber 1078787 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby affecting the confidentiality integrity and availability of the system. An attacker can expect repeatable success by exploiting the vulnerability. The firmware versions <=1.10.1 allow to optionally disable device configuration over the network interfaces. Please make sure that you apply general security practices when operating the SIM4000. A fix is planned but not yet scheduled.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://sick.com/psirt; https://sick.com/psirt
CVE: CVE-2022-27584
Published: 2022-11-01
Description: Password recovery vulnerability in SICK SIM2000ST Partnumber 1080579 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby affecting the confidentiality integrity and availability of the system. An attacker can expect repeatable success by exploiting the vulnerability. The firmware versions <=1.7.0 allow to optionally disable device configuration over the network interfaces. Please make sure that you apply general security practices when operating the SIM2000ST. A fix is planned but not yet scheduled.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://sick.com/psirt; https://sick.com/psirt
CVE: CVE-2022-27585
Published: 2022-11-01
Description: Password recovery vulnerability in SICK SIM1000 FX Partnumber 1097816 and 1097817 with firmware version <1.6.0 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby affecting the confidentiality integrity and availability of the system. An attacker can expect repeatable success by exploiting the vulnerability. The recommended solution is to update the firmware to a version >= 1.6.0 as soon as possible (available in SICK Support Portal).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://sick.com/psirt; https://sick.com/psirt
CVE: CVE-2022-27586
Published: 2022-11-01
Description: Password recovery vulnerability in SICK SIM1004 Partnumber 1098148 with firmware version <2.0.0 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby affecting the confidentiality integrity and availability of the system. An attacker can expect repeatable success by exploiting the vulnerability. The recommended solution is to update the firmware to a version >= 2.0.0 as soon as possible (available in SICK Support Portal).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://sick.com/psirt; https://sick.com/psirt
CVE: CVE-2022-43989
Published: 2022-11-01
Description: Password recovery vulnerability in SICK SIM2x00 (ARM) Partnumber 1092673 and 1081902 with firmware version < 1.2.0 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby affecting the confidentiality integrity and availability of the system. An attacker can expect repeatable success by exploiting the vulnerability. The recommended solution is to update the firmware to a version >= 1.2.0 as soon as possible (available in SICK Support Portal).
CVSS Score: 7.3 (HIGH)
CWE: CWE-306, CWE-306
References: https://sick.com/psirt; https://sick.com/psirt
CVE: CVE-2022-43990
Published: 2022-11-01
Description: Password recovery vulnerability in SICK SIM1012 Partnumber 1098146 with firmware version <2.2.0 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby affecting the confidentiality integrity and availability of the system. An attacker can expect repeatable success by exploiting the vulnerability. The recommended solution is to update the firmware to a version >= 2.2.0 as soon as possible (available in SICK Support Portal).
CVSS Score: 7.3 (HIGH)
CWE: CWE-306, CWE-306
References: https://sick.com/psirt; https://sick.com/psirt
CVE: CVE-2022-3812
Published: 2022-11-01
Description: A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is the function AP4_ContainerAtom::AP4_ContainerAtom of the component mp4encrypt. The manipulation leads to memory leak. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-212678 is the identifier assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-404, CWE-401
References: https://github.com/axiomatic-systems/Bento4/files/9726934/POC_mp4encrypt_631000973.zip; https://github.com/axiomatic-systems/Bento4/issues/792; https://vuldb.com/?id.212678
CVE: CVE-2022-3813
Published: 2022-11-01
Description: A vulnerability classified as problematic has been found in Axiomatic Bento4. This affects an unknown part of the component mp4edit. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212679.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-404
References: https://github.com/axiomatic-systems/Bento4/files/9726974/POC_mp4edit_728838793.zip; https://github.com/axiomatic-systems/Bento4/issues/792; https://vuldb.com/?id.212679
CVE: CVE-2022-3814
Published: 2022-11-01
Description: A vulnerability classified as problematic was found in Axiomatic Bento4. This vulnerability affects unknown code of the component mp4decrypt. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212680.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-404
References: https://github.com/axiomatic-systems/Bento4/files/9727002/POC_mp4decrypt_477546304.zip; https://github.com/axiomatic-systems/Bento4/issues/792; https://vuldb.com/?id.212680
CVE: CVE-2022-3815
Published: 2022-11-01
Description: A vulnerability, which was classified as problematic, has been found in Axiomatic Bento4. This issue affects some unknown processing of the component mp4decrypt. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212681 was assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-404
References: https://github.com/axiomatic-systems/Bento4/files/9727048/POC_mp4decrypt_34393864.zip; https://github.com/axiomatic-systems/Bento4/issues/792; https://vuldb.com/?id.212681
CVE: CVE-2022-3816
Published: 2022-11-01
Description: A vulnerability, which was classified as problematic, was found in Axiomatic Bento4. Affected is an unknown function of the component mp4decrypt. The manipulation leads to memory leak. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-212682 is the identifier assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-404
References: https://github.com/axiomatic-systems/Bento4/files/9727059/POC_mp4decrypt_654515280.zip; https://github.com/axiomatic-systems/Bento4/issues/792; https://vuldb.com/?id.212682
CVE: CVE-2022-3817
Published: 2022-11-01
Description: A vulnerability has been found in Axiomatic Bento4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component mp4mux. The manipulation leads to memory leak. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212683.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-404
References: https://github.com/axiomatic-systems/Bento4/files/9727057/POC_mp4mux_[PII_REDACTED].zip; https://github.com/axiomatic-systems/Bento4/issues/792; https://vuldb.com/?id.212683
CVE: CVE-2022-3652
Published: 2022-11-01
Description: Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html; https://crbug.com/1369871; https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html
CVE: CVE-2022-3653
Published: 2022-11-01
Description: Heap buffer overflow in Vulkan in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html; https://crbug.com/1354271; https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html
CVE: CVE-2022-3654
Published: 2022-11-01
Description: Use after free in Layout in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://packetstormsecurity.com/files/170012/Chrome-blink-LocalFrameView-PerformLayout-Use-After-Free.html; https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html; https://crbug.com/1365330
CVE: CVE-2022-3655
Published: 2022-11-01
Description: Heap buffer overflow in Media Galleries in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html; https://crbug.com/1343384; https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html