CVE-2022-2007

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Jul 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-200706.7In ssmr, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystemCVE-2022-200716.7In ccu, there is a possible escalation of privilege due to a missing certificate validation. This could lead to local escalation of privilegCVE-2022-200726.7In search engine service, there is a possible way to change the default search engine due to an incorrect comparison. This could lead to locCVE-2022-200736.6In preloader (usb), there is a possible out of bounds write due to a integer underflow. This could lead to local escalation of privilege, foCVE-2022-200746.6In preloader (partition), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privCVE-2022-200756.7In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System exeCVE-2022-200764.4In ged, there is a possible memory corruption due to an incorrect error handling. This could lead to local information disclosure with SysteCVE-2022-200776.4In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System executioCVE-2022-200786.4In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System executioCVE-2022-200794.4In vow, there is a possible read of uninitialized data due to a improper input validation. This could lead to local information disclosure wCVE-2022-20088.8Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a craftedCVE-2022-200806.4In SUB2AF, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execu
CVE-2022-2007: High severity, CVSS 8.8 | Vulnix