Lucene search

ChromeCVE-2022-2743

HistoryJan 02, 2023 - 11:15 p.m.

CVE-2022-2743

2023-01-0223:15:10

CWE-190

Chrome

web.nvd.nist.gov

177

cve-2022-2743

integer overflow

window manager

google chrome

chrome os

lacros

remote attacker

out of bounds memory write

ui interactions

chrome security

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.5

Confidence

High

EPSS

0.001

Percentile

45.2%

JSON

Integer overflow in Window Manager in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to perform an out of bounds memory write via crafted UI interactions. (Chrome security severity: High)

Affected configurations

Nvd

Vulners

Node

googlechromeRange<104.0.5112.79

Node

googlechrome_osMatch-

googlelinux_and_chrome_osMatch-

VendorProductVersionCPE
googlechrome*cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
googlechrome_os-cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*
googlelinux_and_chrome_os-cpe:2.3:o:google:linux_and_chrome_os:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	chrome	*	cpe:2.3:a:google:chrome::::::::
google	chrome_os	-	cpe:2.3:o:google:chrome_os:-:::::::*
google	linux_and_chrome_os	-	cpe:2.3:o:google:linux_and_chrome_os:-:::::::*

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "104.0.5112.79",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]