Type Confusion Vulnerability in Google Chrome by Google
CVE-2022-1364

8.8HIGH

Key Information:

Vendor: Google
Status: Chrome
Vendor: CVE Published:; 26 July 2022

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 13%🦅 CISA Reported

What is CVE-2022-1364?

A type confusion issue in the V8 engine's Turbofan compiler within Google Chrome versions prior to 100.0.4896.127 can be exploited by a remote attacker. By leveraging a specially crafted HTML page, attackers can trigger heap corruption, potentially leading to unauthorized access and other adverse effects. This vulnerability underscores the necessity for users and organizations to regularly update their browsers to mitigate risks associated with such exploits.

CISA has reported CVE-2022-1364

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2022-1364 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace

The CISA's recommendation is: Apply updates per vendor instructions.

Affected Version(s)

Chrome < 100.0.4896.127

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

uc_browser_poc_CVE-2022-1364
Created by interruptlabs

cve-2022-1364
Created by A1Lin

CVE-2022-1364
Created by jamezx32