CVE-2022-0107: Use after free in File Manager API
Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2022-0096
- CVE-2022-0097
- CVE-2022-0098
- CVE-2022-0099
- CVE-2022-0100
- CVE-2022-0101
- CVE-2022-0337
- CVE-2022-0102
- CVE-2022-0103
- CVE-2022-4924
- CVE-2022-0104
- CVE-2022-0105
- CVE-2022-0106
- CVE-2022-0108
- CVE-2022-0109
- CVE-2022-0110
- CVE-2022-0111
- CVE-2022-0112
- CVE-2022-0113
- CVE-2022-0114
- CVE-2022-0115
- CVE-2022-0116
- CVE-2022-0117
- CVE-2022-0118
- CVE-2022-0120
- CVE-2022-4925
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-0107.
What is the title of this vulnerability?
The title of this vulnerability is 'Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71'.
What is the description of this vulnerability?
The description of this vulnerability is 'Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.'
What software is affected by this vulnerability?
The software affected by this vulnerability is Chromium on Debian versions 90.0.4430.212-1~deb10u1 and earlier, Chrome OS prior to 97.0.4692.71.
How can I fix this vulnerability?
To fix this vulnerability, update Chromium to version 90.0.4430.212-1~deb10u1 or later, or update Chrome OS to version 97.0.4692.71 or later.