Access of Resource Using Incompatible Type ('Type Confusion') Affecting chromium package, versions [,108.0.5359.71)
Threat Intelligence
EPSS
0.28% (69th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-UNMANAGED-CHROMIUM-3151007
- published 30 Nov 2022
- disclosed 30 Nov 2022
- credit Zhenghang Xiao
Introduced: 30 Nov 2022
CVE-2022-4174 Open this link in a new tabHow to fix?
Upgrade chromium to version 108.0.5359.71 or higher.
Overview
Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type ('Type Confusion') in V8, via heap corruption.
References
CVSS Scores
version 3.1