Coming Soon...

Q-CERT website is currently under maintenance. We should be back shortly. Thank you for yor patience.

Actively Exploited Vulnerability in Google Chrome

Issued: 
Tuesday, 29 November, 2022
Last Revision: 
Tuesday, 29 November, 2022
Vendor: 
Product: 
Severity Level: 
Summary: 

Google has released an emergency update to fix the actively exploited zeroday vulnerability in its Chrome web browser. The exploited vulnerability is (CVE2022-4135) described as a heap buffer overflow in the GPU component.

 

The vulnerability allows remote attacker to potentially perform a sandbox escape via a crafted HTML page. This means, malicious contents can bypass sandboxed environments to execute arbitrary commands on the victim machine. 

 

CVE/Vulnerability

Affected Version

CVSS Score

Exploitable

CVE-2022-4135

Google Chrome versions prior to 107.0.5304.121

 

Yes

 

 

Recommendation: 

Google had released the updated version for the affected products. It is recommended to update the affected versions to latest one.