Lucene search
Alpine Linux Development TeamALPINE:CVE-2022-0609HistoryApr 05, 2022 - 12:15 a.m.
CVE-2022-0609
2022-04-0500:15:17
Alpine Linux Development Team
security.alpinelinux.org
46
vulnerability
google chrome
heap corruption
animation
remote attacker
crafted html page
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.041
Percentile
92.2%
Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | chromium | < 98.0.4758.102-r0 | UNKNOWN |
| Alpine | edge-community | noarch | qt5-qtwebengine | < 5.15.3_git20220121-r4 | UNKNOWN |
| Alpine | 3.15-community | noarch | chromium | < 99.0.4844.84-r0 | UNKNOWN |
| Alpine | 3.15-community | noarch | qt5-qtwebengine | < 5.15.3_git20211127-r4 | UNKNOWN |
| Alpine | 3.16-community | noarch | chromium | < 98.0.4758.102-r0 | UNKNOWN |
| Alpine | 3.16-community | noarch | qt5-qtwebengine | < 5.15.3_git20220121-r4 | UNKNOWN |
| Alpine | 3.17-community | noarch | chromium | < 98.0.4758.102-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | qt5-qtwebengine | < 5.15.3_git20220121-r4 | UNKNOWN |
| Alpine | 3.18-community | noarch | chromium | < 98.0.4758.102-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | qt5-qtwebengine | < 5.15.3_git20220121-r4 | UNKNOWN |
Related
gitlab
gitlab
Use after free in Animation
2022-02-22 00:00:00
Use after free in Animation
2022-02-22 00:00:00
Use after free in Animation
2022-02-22 00:00:00
cnvd
cnvd
Google Chrome Animation code execution vulnerability
2022-02-16 00:00:00
hivepro
hivepro
First zero-day vulnerability of Google Chrome this year actively exploited in wild
2022-02-15 14:31:12
North Korean state-sponsored threat actor Lazarus Group exploiting Chrome Zero-day vulnerability
2022-03-25 14:16:43
Weekly Threat Digest: 21 – 27 March 2022
2022-03-29 13:56:10
mscve
mscve
Chromium: CVE-2022-0609 Use after free in Animation
2022-02-16 08:00:00
nvd
nvd
CVE-2022-0609
2022-04-05 00:15:17
thn
thn
ubuntucve
ubuntucve
CVE-2022-0609
2022-04-05 00:00:00
debiancve
debiancve
CVE-2022-0609
2022-04-05 00:15:17
attackerkb
attackerkb
CVE-2022-0609
2022-04-05 00:00:00
osv
osv
Use after free in Animation
2022-02-22 21:51:19
chromedriver-98.0.4758.102-1.1 on GA media
2024-06-15 00:00:00
chromium - security update
2022-02-17 00:00:00
cvelist
cvelist
CVE-2022-0609
2022-04-04 23:55:32
veracode
veracode
Use After Free
2022-02-20 05:48:53
threatpost
threatpost
Google Chrome Zero-Day Bugs Exploited Weeks Ahead of Patch
2022-03-25 13:19:59
Google Patches Chrome’s Fifth Zero-Day of the Year
2022-08-18 14:31:38
Google Patches Actively Exploited Chrome Bug
2022-07-05 11:54:21
github
github
Use after free in Animation
2022-02-22 21:51:19
checkpoint_advisories
checkpoint_advisories
Google Chrome Use After Free (CVE-2022-0609)
2022-03-27 00:00:00
prion
prion
Design/Logic Flaw
2022-04-05 00:15:00
schneier
schneier
Chrome Zero-Day from North Korea
2022-03-31 11:13:50
cisa_kev
cisa_kev
Google Chromium Animation Use-After-Free Vulnerability
2022-02-15 00:00:00
cve
cve
CVE-2022-0609
2022-04-05 00:15:17
malwarebytes
malwarebytes
Security vulnerabilities: 5 times that organizations got hacked
2022-06-21 10:04:02
Update now! Chrome patches actively exploited zero-day vulnerability
2022-02-15 13:50:16
ics
ics
Rockwell Automation Connected Components Workbench
2023-09-21 12:00:00
trellix
trellix
The Bug Report - February 2022 Edition
2022-03-02 00:00:00
The Bug Report - February 2022 Edition
2022-03-02 00:00:00
avleonov
avleonov
Microsoft Patch Tuesday March 2022
2022-03-14 17:33:28
nessus
nessus
Google Chrome < 98.0.4758.102 Multiple Vulnerabilities
2022-02-14 00:00:00
openSUSE 15 Security Update : chromium (openSUSE-SU-2022:0042-1)
2022-02-22 00:00:00
Google Chrome < 98.0.4758.102 Multiple Vulnerabilities
2022-02-14 00:00:00
suse
suse
Security update for chromium (important)
2022-02-17 00:00:00
Security update for opera (important)
2022-03-07 00:00:00
Security update for opera (important)
2022-04-08 00:00:00
openvas
openvas
kaspersky
kaspersky
KLA12464 Multiple vulnerabilities in Microsoft Browser
2022-02-16 00:00:00
KLA12462 Multiple vulnerabilities in Google Chrome
2022-02-14 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2022-02-14 00:00:00
debian
debian
[SECURITY] [DSA 5079-1] chromium security update
2022-02-17 22:13:55
chrome
chrome
Stable Channel Update for Desktop
2022-02-14 00:00:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
cisa
cisa
CISA Adds Nine Known Exploited Vulnerabilities to Catalog
2022-02-15 00:00:00
securelist
securelist
IT threat evolution in Q1 2022. Non-mobile statistics
2022-05-27 08:00:05
IT threat evolution in Q2 2022. Non-mobile statistics
2022-08-15 12:00:43
gentoo
gentoo
Chromium, Google Chrome: Multiple vulnerabilities
2022-02-20 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.041
Percentile
92.2%
Related for ALPINE:CVE-2022-0609