
Cloud Vulnerability DB
A community-led vulnerabilities database
Out of bounds write vulnerability (CVE-2022-3373) was discovered in Google Chrome's V8 engine prior to version 106.0.5249.91. The vulnerability was reported on September 21, 2022, by security researcher Tibor Klajnscek and was officially disclosed on September 30, 2022. This security flaw affected the V8 JavaScript engine in Google Chrome browsers across Windows, Mac, and Linux platforms (Chrome Release).
The vulnerability is classified as an out-of-bounds write issue in the V8 JavaScript engine, which could be triggered through a specially crafted HTML page. The severity of this vulnerability is rated as High with a CVSS 3.1 score of 8.8. The vulnerability requires network access and user interaction but no privileges, with potential high impacts on confidentiality, integrity, and availability (Ubuntu Security).
If successfully exploited, this vulnerability allows remote attackers to perform out-of-bounds memory writes through specially crafted HTML pages. The high CVSS score indicates significant potential impact on system security, affecting confidentiality, integrity, and availability of the targeted system (CVE Mitre).
Google addressed this vulnerability by releasing version 106.0.5249.91 of Chrome for Windows, Mac, and Linux platforms. Users are advised to update their Chrome browsers to this version or later to protect against this security flaw. The fix was also backported to various Linux distributions, including Debian and Ubuntu (Chrome Release, Debian Security).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."