CVE-2022-1096

A type confusion vulnerability in Google's Chromium V8 engine allowed remote attackers to exploit heap corruption via crafted HTML pages.

This vulnerability affected multiple Chromium-based browsers, enabling remote code execution through heap corruption. DIB organizations must ensure their browsers are patched promptly, as unpatched instances could lead to data breaches or ransomware entry. The vulnerability was actively exploited in the wild, highlighting the risk of relying on unpatched software.

Shame score — The vulnerability was actively exploited in the wild, indicating a failure to patch known issues before exploitation, which is a severe compliance and security failure.