Google Chromium GPU Heap Buffer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 28/11/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| chrome | < 107.0.5304.121 | 107.0.5304.121 |
| edge | < 107.0.1418.62 | 107.0.1418.62 |
| edge chromium | < 107.0.5304.150 | 107.0.5304.150 |
| electron | ≥ 19.0.0, < 19.1.8 | 19.1.8 |
Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free