CVE-2022-2481

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Use after free in Views in Google Chrome prior to 103.0.5060.134 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via UI interaction.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Jul 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-248108.8net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentiaCVE-2022-248115.4Combodi iTop is a web based IT Service Management tool. Prior to versions 2.7.6 and 3.0.0, cross-site scripting is possible for scripts outsCVE-2022-248128.8Grafana is an open-source platform for monitoring and observability. When fine-grained access control is enabled and a client uses Grafana ACVE-2022-248135.3CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. Without the patch for this issue, anonymous comments can be maCVE-2022-248146.1Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 9.7.0, unauthorized JavaScript (JS) can beCVE-2022-248158.1JHipster is a development platform to quickly generate, develop, & deploy modern web applications & microservice architectures. SQL InjectioCVE-2022-2481610.0JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided vCVE-2022-248179.9Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 CVE-2022-248187.2GeoTools is an open source Java library that provides tools for geospatial data. The GeoTools library has a number of data sources that can CVE-2022-248195.3XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user without the right to vCVE-2022-24828.8A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and 474021A.102) that could allow an attacker to place aCVE-2022-248205.3XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user without the right to v