CVE-2022-2613
Published on: Not Yet Published
Last Modified on: 10/27/2022 06:50:00 PM UTC
Certain versions of Fedora from Fedoraproject contain the following vulnerability:
Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in specific user interactions to potentially exploit heap corruption via specific UI interactions.
- CVE-2022-2613 has been assigned by
[email protected] to track the vulnerability - currently rated as HIGH severity. - Affected Vendor/Software: Google - Chrome version < 104.0.5112.79
CVSS3 Score: 8.8 - HIGH
| Attack Vector ⓘ |
Attack Complexity |
Privileges Required |
User Interaction |
|---|---|---|---|
| NETWORK | LOW | NONE | REQUIRED |
| Scope | Confidentiality Impact |
Integrity Impact |
Availability Impact |
| UNCHANGED | HIGH | HIGH | HIGH |
CVE References
| Description | Tags ⓘ | Link |
|---|---|---|
| 1325256 - chromium - An open-source project to help move the web forward. - Monorail | crbug.com text/html |
MISC crbug.com/1325256 |
| [SECURITY] Fedora 37 Update: chromium-105.0.5195.125-2.fc37 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org text/html |
FEDORA FEDORA-2022-3f28aa88cf |
| Chrome Releases: Stable Channel Update for Desktop | chromereleases.googleblog.com text/html |
MISC chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html |
| Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities (GLSA 202208-35) — Gentoo security | security.gentoo.org text/html |
GENTOO GLSA-202208-35 |
Related QID Numbers
- 180919 Debian Security Update for chromium (DSA 5201-1)
- 283172 Fedora Security Update for chromium (FEDORA-2022-3ca063941b)
- 283173 Fedora Security Update for chromium (FEDORA-2022-b49c9bc07a)
- 376772 Google Chrome Prior to 104.0.5112.79 Multiple Vulnerabilities
- 690907 Free Berkeley Software Distribution (FreeBSD) Security Update for chromium (96a41723-133a-11ed-be3b-3065ec8fd3ec)
- 710606 Gentoo Linux Chromium, Google Chrome, Microsoft Edge Multiple Vulnerabilities (GLSA 202208-35)
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Fedoraproject | Fedora | 37 | All | All | All |
| Application | Chrome | All | All | All | All | |
| Operating System | Chrome Os | - | All | All | All |
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*:
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*:
- cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*:
No vendor comments have been submitted for this CVE
Social Mentions
| Source | Title | Posted (UTC) |
|---|---|---|
 @sva_focuson |
⚠️CVE-2022-2613–Kritische Sicherheitslücke. #Atlassian hat heute Nacht eine Information zu einer kritischen Sicherh… twitter.com/i/web/status/1… | 2022-06-03 09:57:05 |
| @RobWright22 |
Despite Atlassian releasing patches for CVE-2022-2613 on Friday, there are multiple reports of exploitation activit… twitter.com/i/web/status/1… | 2022-06-06 23:07:02 |
| @Prohacktiv3 |
? Surveillance des #POC (Proof Of Concept) sur @github : ? CVE-2022-26134: github.com/Debajyoti0-0/C… ? CVE-2022-2613… twitter.com/i/web/status/1… | 2022-07-06 06:10:23 |
| @Prohacktiv3 |
? Surveillance des #POC (Proof Of Concept) sur @github : ? CVE-2021-46422: github.com/twoning/CVE-20… ? CVE-2022-2613… twitter.com/i/web/status/1… | 2022-07-15 06:51:20 |
| @Allistic_fr |
?CVE-2022-2613X Trois nouvelles vulnérabilités critiques ont été révélées sur les applications Atlassian ces derni… twitter.com/i/web/status/1… | 2022-08-04 08:00:00 |
| @CVEreport |
CVE-2022-2613 : Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attac… twitter.com/i/web/status/1… | 2022-08-12 19:49:28 |
 /r/k12cybersecurity |
MS-ISAC CYBERSECURITY ADVISORY - Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution - PATCH: NOW | 2022-08-03 21:06:30 |
| /r/netcve |
CVE-2022-2613 | 2022-08-12 20:38:35 |