Severity Rating: HIGH

Software Affected

Google ChromeOS LTS Channel versions prior to 102.0.5005.193 (Platform Version: 14695.166.0)

Overview

Multiple vulnerabilities have been reported in Google Chrome OS which could be exploited by a remote attacker to execute arbitrary code or cause a denial-of-service condition on the targeted system.

Description

Multiple vulnerabilities exist in Google Chrome OS due to Use after free in Mojo, Audio and Forms; Heap buffer overflow in GPU. An attacker could exploit these vulnerabilities by persuading a victim to visit a specially crafted Web site.

Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary code or cause a denial-of-service condition on the targeted system.

Solution

Apply appropriate updates as mentioned by the vendor:

Vendor Information

Google Chrome

References

Google Chrome

CVE Name

CVE-2022-4178

CVE-2022-4179

CVE-2022-4181

CVE-2022-4135