Skip to content
8.8 High

CVE-2022-1364 Google Chromium V8 Type Confusion Vulnerability

Active exploitation observed

· CISA KEV catalogue
Required action Apply updates per vendor instructions.
Ransomware campaigns Not observed so far
Weakness CWE-843

Description

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products and versions

Product Affected versions Fixed in
Chrome 100.0 earliest → < 100.0.4896.127 100.0.4896.127
The 6072 CVEs of Chrome →
Track this CVE