
Cloud Vulnerability DB
A community-led vulnerabilities database
A high-severity vulnerability identified as CVE-2022-3045 was discovered in Google Chrome's V8 engine prior to version 105.0.5195.52. The vulnerability stems from insufficient validation of untrusted input in V8, which could allow a remote attacker to potentially exploit heap corruption through a crafted HTML page (Chrome Release, NVD).
The vulnerability exists in the V8 JavaScript engine of Google Chrome and is characterized by insufficient validation of untrusted input. This security flaw could lead to heap corruption, which is a type of memory corruption vulnerability. The issue was reported by Ben Noordhuis on June 26, 2022, and was addressed in Chrome version 105.0.5195.52 (Chrome Release).
The vulnerability could potentially allow remote attackers to exploit heap corruption through specially crafted HTML pages, which could lead to arbitrary code execution or program crashes (NVD).
Google has released a fix in Chrome version 105.0.5195.52. Users and administrators are strongly advised to upgrade to this version or later. The vulnerability has also been addressed in various Linux distributions, including Debian and Fedora, through their respective security updates (Debian Security, Fedora Update).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."