CVE-2022-4135

Description from NVD

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Information Acquisition Date:2022-11-30T19:36Z
CVSS 2.0: 0.0 None CVSS 3.x: 9.6 CRITICAL

▼ CVSS3 Vec CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD References

 https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_24.html
     source:MISC
     tags:Release Notes    Vendor Advisory    
 https://crbug.com/1392715
     source:MISC
     tags:Permissions Required    

Description from Forti

Security Update 2022-11-24 from Google Chrome

Information Acquisition Date:2022/11/27

Affected Products

Impact

Recommended Actions

References

Refer to Information on External Sites

CVE InfomationExploits or more Infomation
mitreEXPLOIT DATABASE
NVD0day.today
vulmon.comgithub
CVE DetailsTwitter
JVN ENG JPN
Reconshell

Software Tag: Chrome(1 tweets)

List of frequently cited URLs

URLNum of Times Referred to
https://cvetrends.com51
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2...5
http://SecurityWeek.Com4
https://kev.kokumoto.com/4
https://www.bleepingcomputer.com/news/security/google-pushe...4
https://googleprojectzero.github.io/0days-in-the-wild//0day...4
https://chromereleases.googleblog.com/2022/11/stable-channe...4
https://cve.report/CVE-2022-41353
https://twitter.com/USCERT_gov/status/15973499383583621133
https://thehackernews.com/2022/11/update-chrome-browser-now...3
https://securityonline.info/cve-2022-4135-new-zero-day-vuln...3

Information from Twitter

User URL Info Source Date
blackorbird https://blog.google/threat-analysis-group/spyware-vendors-u... Source blackorbird      1641814397185331200 2023/03/31
blackorbird https://twitter.com/blackorbird/status/1641814397185331200/... Source blackorbird      1641814397185331200 2023/03/31

List of frequently cited URLs

URLNum of Times Referred to
cvetrends.com51
msrc.microsoft.com5
SecurityWeek.Com4
kev.kokumoto.com4
www.bleepingcomputer.com4
googleprojectzero.github.io4
chromereleases.googleblog.com4
cve.report3
twitter.com3
thehackernews.com3
securityonline.info3

Information from Twitter

User URL Info Source
blackorbird blog.google Show Tweet
blackorbird twitter.com Show Tweet
GitHub Search Results: Up to 10
NameURL
Cr4ckC4t/cve-2022-41352-zimbra-rce https://github.com/Cr4ckC4t/cve-2022-41352-zimbra-rce
segfault-it/cve-2022-41352 https://github.com/segfault-it/cve-2022-41352
thecasual/CVE-2022-41358 https://github.com/thecasual/CVE-2022-41358
aryrz/cve-2022-41352-zimbra-rce https://github.com/aryrz/cve-2022-41352-zimbra-rce
GitHub Search Results: Up to 10
NameURL
Cr4ckC4t/cve-2022-41352-zimbra-rce github.com
segfault-it/cve-2022-41352 github.com
thecasual/CVE-2022-41358 github.com
aryrz/cve-2022-41352-zimbra-rce github.com
2023/04/01 Score : 0
Added Har-sia Database : 2022/11/25
Last Modified : 2023/04/01
Highest Scored Date : 2022/11/25
Highest Score : 64