Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-3f28aa88cf advisory.

    Update to chromium-105.0.5195.125. This package only has minor changes... ah, just kidding. Here is the     pile of security issues it fixes:

    CVE-2022-2007 CVE-2022-2008 CVE-2022-2010 CVE-2022-2011 CVE-2022-2603 CVE-2022-2604 CVE-2022-2605     CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612     CVE-2022-2613 CVE-2022-2614 CVE-2022-2615 CVE-2022-2616 CVE-2022-2617 CVE-2022-2618 CVE-2022-2619     CVE-2022-2620 CVE-2022-2621 CVE-2022-2622 CVE-2022-2623 CVE-2022-2624 CVE-2022-2852 CVE-2022-2854     CVE-2022-2855 CVE-2022-2857 CVE-2022-2858 CVE-2022-2853 CVE-2022-2856 CVE-2022-2859 CVE-2022-2860     CVE-2022-2861 CVE-2022-3038 CVE-2022-3039 CVE-2022-3040 CVE-2022-3041 CVE-2022-3042 CVE-2022-3043     CVE-2022-3044 CVE-2022-3045 CVE-2022-3046 CVE-2022-3071 CVE-2022-3047 CVE-2022-3048 CVE-2022-3049     CVE-2022-3050 CVE-2022-3051 CVE-2022-3052 CVE-2022-3053 CVE-2022-3054 CVE-2022-3055 CVE-2022-3056     CVE-2022-3057 CVE-2022-3058 CVE-2022-3075 CVE-2022-3195 CVE-2022-3196 CVE-2022-3197 CVE-2022-3198     CVE-2022-3199 CVE-2022-3200 CVE-2022-3201


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page. (CVE-2022-2295)

  - Use after free in ANGLE in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page. (CVE-2022-1854)

  - Use after free in Messaging in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to
    potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1855)

  - Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed a
    remote attacker to bypass file system restrictions via a crafted HTML page. (CVE-2022-1857)

  - Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page. (CVE-2022-2008)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-b49c9bc07a advisory.

    Update to chromium-105.0.5195.125. This package only has minor changes... ah, just kidding. Here is the     pile of security issues it fixes:

    CVE-2022-2007 CVE-2022-2008 CVE-2022-2010 CVE-2022-2011 CVE-2022-2603 CVE-2022-2604 CVE-2022-2605     CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612     CVE-2022-2613 CVE-2022-2614 CVE-2022-2615 CVE-2022-2616 CVE-2022-2617 CVE-2022-2618 CVE-2022-2619     CVE-2022-2620 CVE-2022-2621 CVE-2022-2622 CVE-2022-2623 CVE-2022-2624 CVE-2022-2852 CVE-2022-2854     CVE-2022-2855 CVE-2022-2857 CVE-2022-2858 CVE-2022-2853 CVE-2022-2856 CVE-2022-2859 CVE-2022-2860     CVE-2022-2861 CVE-2022-3038 CVE-2022-3039 CVE-2022-3040 CVE-2022-3041 CVE-2022-3042 CVE-2022-3043     CVE-2022-3044 CVE-2022-3045 CVE-2022-3046 CVE-2022-3071 CVE-2022-3047 CVE-2022-3048 CVE-2022-3049     CVE-2022-3050 CVE-2022-3051 CVE-2022-3052 CVE-2022-3053 CVE-2022-3054 CVE-2022-3055 CVE-2022-3056     CVE-2022-3057 CVE-2022-3058 CVE-2022-3075 CVE-2022-3195 CVE-2022-3196 CVE-2022-3197 CVE-2022-3198     CVE-2022-3199 CVE-2022-3200 CVE-2022-3201


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-3ca063941b advisory.

    Update to chromium-105.0.5195.125. This package only has minor changes... ah, just kidding. Here is the     pile of security issues it fixes:

    CVE-2022-2007 CVE-2022-2008 CVE-2022-2010 CVE-2022-2011 CVE-2022-2603 CVE-2022-2604 CVE-2022-2605     CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612     CVE-2022-2613 CVE-2022-2614 CVE-2022-2615 CVE-2022-2616 CVE-2022-2617 CVE-2022-2618 CVE-2022-2619     CVE-2022-2620 CVE-2022-2621 CVE-2022-2622 CVE-2022-2623 CVE-2022-2624 CVE-2022-2852 CVE-2022-2854     CVE-2022-2855 CVE-2022-2857 CVE-2022-2858 CVE-2022-2853 CVE-2022-2856 CVE-2022-2859 CVE-2022-2860     CVE-2022-2861 CVE-2022-3038 CVE-2022-3039 CVE-2022-3040 CVE-2022-3041 CVE-2022-3042 CVE-2022-3043     CVE-2022-3044 CVE-2022-3045 CVE-2022-3046 CVE-2022-3071 CVE-2022-3047 CVE-2022-3048 CVE-2022-3049     CVE-2022-3050 CVE-2022-3051 CVE-2022-3052 CVE-2022-3053 CVE-2022-3054 CVE-2022-3055 CVE-2022-3056     CVE-2022-3057 CVE-2022-3058 CVE-2022-3075 CVE-2022-3195 CVE-2022-3196 CVE-2022-3197 CVE-2022-3198     CVE-2022-3199 CVE-2022-3200 CVE-2022-3201


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10057-1 advisory.

  - Use after free in WebGPU. (CVE-2022-2007)

  - Out of bounds memory access in WebGL. (CVE-2022-2008)

  - Out of bounds read in compositing. (CVE-2022-2010)

  - Use after free in ANGLE. (CVE-2022-2011)

  - This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this     vulnerability. Please see Google Chrome Releases for more information. (CVE-2022-2294)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10009-1 advisory.

  - Use after free in Indexed DB. (CVE-2022-1853)

  - Use after free in ANGLE. (CVE-2022-1854, CVE-2022-2011)

  - Use after free in Messaging. (CVE-2022-1855)

  - Use after free in User Education. (CVE-2022-1856)

  - Insufficient policy enforcement in File System API. (CVE-2022-1857, CVE-2022-1871)

  - Out of bounds read in DevTools. (CVE-2022-1858)

  - Use after free in Performance Manager. (CVE-2022-1859)

  - Use after free in UI Foundations. (CVE-2022-1860)

  - Use after free in Sharing. (CVE-2022-1861)

  - Inappropriate implementation in Extensions. (CVE-2022-1862)

  - Use after free in Tab Groups. (CVE-2022-1863)

  - Use after free in WebApp Installs. (CVE-2022-1864)

  - Use after free in Bookmarks. (CVE-2022-1865)

  - Use after free in Tablet Mode. (CVE-2022-1866)

  - Insufficient validation of untrusted input in Data Transfer. (CVE-2022-1867)

  - Inappropriate implementation in Extensions API. (CVE-2022-1868)

  - Type Confusion in V8. (CVE-2022-1869)

  - Use after free in App Service. (CVE-2022-1870)

  - Insufficient policy enforcement in Extensions API. (CVE-2022-1872)

  - Insufficient policy enforcement in COOP. (CVE-2022-1873)

  - Insufficient policy enforcement in Safe Browsing. (CVE-2022-1874)

  - Inappropriate implementation in PDF. (CVE-2022-1875)

  - Heap buffer overflow in DevTools. (CVE-2022-1876)

  - Use after free in WebGPU. (CVE-2022-2007)

  - Out of bounds memory access in WebGL. (CVE-2022-2008)

  - Out of bounds read in compositing. (CVE-2022-2010)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Microsoft Edge installed on the remote Windows host is prior to 102.0.1245.41. It is, therefore, affected by multiple vulnerabilities as referenced in the June 13, 2022 advisory.

  - Use after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2011)

  - Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2007)

  - Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2008)

  - Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who     had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2022-2010)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5163 advisory.

  - Use after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2011)

  - Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2007)

  - Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2008)

  - Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who     had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2022-2010)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c80ce2dd-e831-11ec-bcd2-3065ec8fd3ec advisory.

  - Use after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2011)

  - Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2007)

  - Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2008)

  - Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who     had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2022-2010)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 102.0.5005.115. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_06_stable-channel-update-for-desktop advisory.

  - Use after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2011)

  - Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who     had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2022-2010)

  - Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2007)

  - Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2008)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 102.0.5005.115. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_06_stable-channel-update-for-desktop advisory.

  - Use after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2011)

  - Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who     had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2022-2010)

  - Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2007)

  - Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2008)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
211177	Fedora 37 : chromium (2022-3f28aa88cf)	Nessus	Fedora Local Security Checks	critical
406861	Alpine: qt5-qtwebengine: security update to 5.15.3_git20220601-r1	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
406861	Alpine: qt5-qtwebengine: security update to 5.15.3_git20220601-r1	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
406856	Alpine: multiple qt5-qtwebengine packages: security update to 5.15.3_git20220505-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
406856	Alpine: multiple qt5-qtwebengine packages: security update to 5.15.3_git20220505-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
169151	Fedora 36 : chromium (2022-b49c9bc07a)	Nessus	Fedora Local Security Checks	critical
169098	Fedora 35 : chromium (2022-3ca063941b)	Nessus	Fedora Local Security Checks	critical
163094	openSUSE 15 Security Update : opera (openSUSE-SU-2022:10057-1)	Nessus	SuSE Local Security Checks	critical
162322	openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10009-1)	Nessus	SuSE Local Security Checks	critical
162168	Microsoft Edge (Chromium) < 102.0.1245.41 Multiple Vulnerabilities	Nessus	Windows	critical
162152	Debian DSA-5163-1 : chromium - security update	Nessus	Debian Local Security Checks	critical
161988	FreeBSD : chromium -- multiple vulnerabilities (c80ce2dd-e831-11ec-bcd2-3065ec8fd3ec)	Nessus	FreeBSD Local Security Checks	critical
161980	Google Chrome < 102.0.5005.115 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical
161979	Google Chrome < 102.0.5005.115 Multiple Vulnerabilities	Nessus	Windows	critical

Detections

Analytics

CVE-2022-2008

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical