CVE-2022-2742 | Vulnetix

CVE-2022-2742 PUBLISHED CVSS 8.8 HIGH

Reported by chrome · Published January 2, 2023

Use after free in Exosphere in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions. (Chrome security severity: High)

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
Chrome	Google	104.0.5112.79

Risk scores

CVSS 3.1

8.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Versions
Google	Chrome	unspecified
Google	Chrome	*
google	chrome	0

Timeline

Jan 2, 2023 CVE Published
Jan 3, 2023 EPSS Score (30 in total, the first dated here)
Oct 22, 2024 CVE Updated
Apr 3, 2026 Security Advisory
Jun 28, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2022-2742
vulnetix vdb fixes CVE-2022-2742

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-2742/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →