VDB
CVE-2022-3653
CVE-2022-3653
PUBLISHED
In Google Chrome/Microsoft Edge existieren mehrere Schwachstellen. Diese bestehen aufgrund verschiedener Fehler in der Speicherverwaltung (z.B. Pufferüberläufe, Use-After-Free), sowie aufgrund von Fehlern bei der Prüfung von Daten bzw. Eingaben. Ein Angreifer kann dies ausnutzen, um beliebigen Code auszuführen und um einen Denial of Service Zustand herbeizuführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
EPSS 0.21% · 44.0th percentile
Risk Scores
EPSS Score
0.21%
44.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Edge < 107.0.1418.24 | |
| Debian | Debian Linux |
Exploit Intelligence
- CVE-2022-3653 just the c++ component in Vulkan for later study (github-poc-repo)
- CVE-2022-3653 just the c++ component in Vulkan for later study (github-poc-repo)
- CVE-2022-3653 just the c++ component in Vulkan for later study (github-poc-repo)
- CVE-2022-3653 just the c++ component in Vulkan for later study (github-poc-repo)
- CVE-2022-3653 just the c++ component in Vulkan for later study (github-poc-repo)
- CVE-2022-3653 just the c++ component in Vulkan for later study (github-poc-repo)
- CVE-2022-3653 just the c++ component in Vulkan for later study (github-poc)
- CVE-2022-3653 just the c++ component in Vulkan for later study (github-poc)
- CVE-2022-3653 just the c++ component in Vulkan for later study (github-poc)
- CVE-2022-3653 just the c++ component in Vulkan for later study (github-poc)
…and 1 more exploits
Timeline
- Oct 25, 2022 CVE Published
- Nov 3, 2022 EPSS Score
- Dec 16, 2022 EPSS Score
- Jan 15, 2023 CVE Updated
- Jan 28, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 13, 2023 EPSS Score
- Apr 25, 2023 EPSS Score
- Jun 7, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Sep 2, 2023 EPSS Score
- Oct 15, 2023 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-1859.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1859 advisory
- https://bugs.chromium.org/p/chromium/issues/detail?id=1352817 advisory
- https://bugs.chromium.org/p/chromium/issues/detail?id=1327505 advisory
- https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html advisory
- https://lists.debian.org/debian-security-announce/2022/msg00231.html advisory
- https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security advisory