Coming Soon...

Q-CERT website is currently under maintenance. We should be back shortly. Thank you for yor patience.

Multiple Vulnerabilities in Google Chrome

Issued: 
Thursday, 27 October, 2022
Last Revision: 
Thursday, 27 October, 2022
Vendor: 
Product: 
Severity Level: 
Summary: 

Google this week announced the release of Chrome 107 to the stable channel, with patches for 14 vulnerabilities, including high – severity issues among which ten security issues were reported externally: three was reported as high – severity, six medium – severity, and one low – severity issue.

To exploit these flaws, a remote attacker needs to trick a user into accessing a specially crafted webpage in a vulnerable browser. Successful exploitation could allow the attacker to execute arbitrary code or cause a denial-of-service (DoS) condition on the affected system.

 

 

CVE/Vulnerability

Description

 Severity

Exploitable

 

 

CVE-2022-3652

Type Confusion in V8

High

No

 

 

CVE-2022-3653

Heap buffer overflow in Vulkan.

High

No

 

 

CVE-2022-3654

Use after free in Layout.

High

No

 

       

Table 1: Vulnerability details

 

 

 

CVE/Vulnerability

Product(s) Detail 

 

 

CVE-2022-3652

CVE-2022-3653

CVE-2022-3654

Chrome 107.0.5304.62 for Mac, 107.0.5304.68 for Linux and 107.0.5304.62/63 Windows

 

     

                                                                                           Table 2: Vulnerable versions 

Recommendation: 

We Recommend entities to update to latest version. Chrome on Mac, Linux, and Windows users as to versions 107.0.5304.62, 107.0.5304.68, and 107.0.5304.62/63, respectively.