EXPOSURES › CVE-2022-4135
CVE-2022-4135
HIGH ⌖ ON CISA KEV · EXPLOITEDGoogle Chromium GPU heap buffer overflow allowed remote attacker to escape sandbox
Google's Chromium GPU in various browsers, including Chrome, Edge, and Opera, had a heap buffer overflow vulnerability that allowed a remote attacker to escape the sandbox if they had compromised the renderer process. This could lead to a sandbox escape via a crafted HTML page.
Shame score — Critical severity and actively exploited in the wild
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Google Chromium GPU contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
| PRODUCT | STATUS |
|---|---|
| Google Services (Google Cloud Platform Products and underlying Infrastructure) Google |
Authorized |
| Google Workspace Google |
Authorized |