Severity

High

Analysis Summary

CVE-2022-0980

Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in New Tab Page. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

CVE-2022-0979

Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in Safe Browsing. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

CVE-2022-0978

Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in ANGLE. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

CVE-2022-0977

Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in Browser UI. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

CVE-2022-0976

Google Chrome is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by GPU. By persuading a victim to visit a specially crafted Web site, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.

CVE-2022-0975

Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in ANGLE. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

CVE-2022-0974

Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in Splitscreen. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

CVE-2022-0973

Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in Safe Browsing. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system

CVE-2022-0971

Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in Blink Layout. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

Impact

• Code Execution

Indicators of Compromise

CVE

• CVE-2022-0980
• CVE-2022-0972
• CVE-2022-0979
• CVE-2022-0978
• CVE-2022-0977
• CVE-2022-0976
• CVE-2022-0975
• CVE-2022-0974
• CVE-2022-0973
• CVE-2022-0971

Affected Vendors

Google

Affected Products

• Google Chrome 99

Remediation

Upgrade to the latest version of Chrome, available from the Google Chrome Releases Web site.

Google Chrome Releases Web site