CVE-2022-0098 is a use-after-free vulnerability in the Screen Capture component of Google Chrome on Chrome OS, affecting versions prior to 97.0.4692.71, as well as Fedora Project's Chrome and Fedora. An attacker could exploit this by convincing a user to perform specific gestures, leading to heap corruption. Rated with a CVSS score of 8.8 (High), this vulnerability is network-exploitable with low attack complexity, requiring user interaction. Successful exploitation could result in high impacts to confidentiality, integrity, and availability. There is no evidence of active exploitation (KEV list), nor are there public exploits available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, with only one mention and one article identified.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 97.0.4692.71CPE matchmatch criteria | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | ||
34CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* | ||
35CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* | ||
36CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.