CVE-2022-0609

A use-after-free vulnerability in Google Chromium's animation code allowed remote attackers to exploit heap corruption via crafted HTML pages.

This use-after-free flaw in Chromium's animation subsystem enabled remote code execution via heap corruption, affecting major browsers like Chrome and Edge. DIB organizations must ensure their browsers are patched against this actively exploited vulnerability to prevent ransomware or data breaches. The failure stems from unpatched, exploitable code in a widely deployed software supply chain.

Shame score — A known, actively exploited vulnerability in a foundational browser engine that could be weaponized for ransomware or data exfiltration, representing a severe supply-chain risk.