Google Chrome Vulnerability

Google Chrome Vulnerability

Google released a critical* Chrome vulnerability with a CVSS 3.1 score of 9.6. Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

Affected Systems

Google Chrome versions below 98.0.4758.80.

IoC’s

-

Recommended Solution(s)

It is highly recommended that users update their Chrome to versions 98.0.4758.80 / 98.0.4758.81 / 98.0.4758.82. Google released patches for Windows, Mac and Linux users.

CVE / CWE

CVE-2022-0452

Related Website(s)

• https://nvd.nist.gov/vuln/detail/CVE-2022-0452
• https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html

* Vulnerabilities with a CVSS 3.1 score between 7.0 and 8.9 are evaluated to be “high” whereas vulnerabilities with a CVSS 3.1 score between 9.0 and 10.0 are evaluated to be “critical”.