HIGH 8.8
KEV
CVE-2022-2294
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS v3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA Known Exploited Vulnerability
- Added to KEV
- 2022-08-25
- Remediation deadline
- 2022-09-15
- Required action
- Apply updates per vendor instructions.
- Ransomware
- Yes — known ransomware campaign