CVE-2022-2294

🔥 Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2022-07-28

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected Platforms (CPE)

📦

Google

Chrome

< 103.0.5060.114

📦

Fedoraproject

Extra Packages For Enterprise Linux

= 8.0

💻

Fedoraproject

Fedora

= 35= 36

📦

Webkitgtk

< 2.36.5

References & Advisories

🔗 http://www.openwall.com/lists/oss-security/2022/07/28/2

🔗 https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html

🔗 https://crbug.com/1341043

🔗 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/

🔗 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/

🔗 https://security.gentoo.org/glsa/202208-35

🔗 https://security.gentoo.org/glsa/202208-39

🔗 https://security.gentoo.org/glsa/202311-11