CVE-2022-1096

HighCVSS 8.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-843

Affected software

No affected versions have been published.

Timeline

Published
Jul 23, 2022
Last modified
Jun 17, 2026
Added to CISA KEV
Mar 28, 2022
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-10976.5<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leadingCVE-2022-10987.8Delta Electronics DIAEnergie (all versions prior to 1.8.02.004) are vulnerable to a DLL hijacking condition. When combined with the IncorrecCVE-2022-10994.3Adding a very large number of tags to a runner in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior CVE-2022-11004.3A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 13.1 prior to 14.7.7, 14.8.0 prior to 14.8.5, and 1CVE-2022-11019.8A vulnerability was found in SourceCodester Royale Event Management System 1.0. It has been rated as critical. This issue affects some unknoCVE-2022-11026.1A vulnerability classified as problematic has been found in SourceCodester Royale Event Management System 1.0. Affected is an unknown functiCVE-2022-11038.8The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, whCVE-2022-11044.8The Popup Maker WordPress plugin before 1.16.5 does not sanitise and escape some of its Popup settings, which could allow high privilege useCVE-2022-11054.3An improper access control vulnerability in GitLab CE/EE affecting all versions from 13.11 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 pCVE-2022-11069.1use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.CVE-2022-11076.7During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovereCVE-2022-11086.7A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be