CVE-2022-0114

Katalog CVE

CVSS 8.1 · High EPSS 1,3%

Kerentanan Out-of-bounds Read pada google chrome, fedoraproject fedora. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver.

Rincian

Terbit di NVD

12 Februari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 69,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html release notes · advisory vendor
• https://crbug.com/1267627 exploit · issue tracking · patch · advisory vendor
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6W...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7...