CRITICAL🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2022-4135

CVSS 9.6v3.1pub. 2022-11-25upd. 2025-10-24

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Google Chrome
APP
Google
< 107.0.5304.121
Microsoft Edge
APP
Microsoft
< 107.0.1418.62
Microsoft Edge
APP
Microsoft
< 107.0.5304.150

CISA KEV — detailsi

Vendori: Google ↗
Producti: Chromium GPU
Added to KEVi: November 28, 2022
Remediation deadline (US Federal)i: December 19, 2022(overdue)

🔧Advisory Google↗🇺🇸CISA KEV (original)↗

Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

Google Chromium GPU contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

🔴