CVE-2022-0452

Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML…

published April 5, 2022

CVSS
—
EPSS
1%
Percentile
55.3
In the wild
Unconfirmed
What it is

🚨 A crafty HTML page could lead to a sandbox escape in Google Chrome! It’s like a magician pulling a rabbit out of a hat, but this time, it’s your security that’s at risk. 🔥 Think of it as a safety net in a circus act; if the net has a hole, a performer could fall straight through! In this case, the ‘performers’ are potentially malicious attackers looking to escape the confines of the browser's sandbox. This vulnerability could allow attackers to break free from the secure environment of Chrome, potentially leading to system compromise or access to sensitive data. While no known exploits have been reported, the implications of such a breach could be absolutely devastating!

Put simply

Think of it as a safety net in a circus act; if the net has a hole, a performer could fall straight through! In this case, the ‘performers’ are potentially malicious attackers looking to escape the confines of the browser's sandbox. The issue arises from a use-after-free error in Chrome’s Safe Browsing feature, allowing a remote attacker to manipulate memory management and escape the sandbox. This could let malicious HTML content execute outside the intended restrictions of the browser.

What to do

This vulnerability could allow attackers to break free from the secure environment of Chrome, potentially leading to system compromise or access to sensitive data. While no known exploits have been reported, the implications of such a breach could be absolutely devastating! To stay protected, ensure that your version of Google Chrome is updated to at least 98.0.4758.80. Regularly check for updates, as staying current is your best defense against such vulnerabilities! You’ve got this! Keep your browser updated and you’ll stay one step ahead of any would-be attackers. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00775 · 55.3th percentile
Published
2022-04-05T00:50Z
EPSS history
Timeline
  • 05 APR 00:50Z
    Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML…
    cvelistv5