CVE-2022-1133 is a use-after-free vulnerability in WebRTC Perf affecting Google Chrome versions prior to 100.0.4896.60. A remote attacker could exploit this flaw by tricking a user into visiting a specially crafted HTML page, potentially leading to heap corruption. This vulnerability carries a high CVSS score of 8.8, indicating a severe risk with high impact on confidentiality, integrity, and availability, and requires user interaction. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community attention and media coverage, suggesting a recognized threat.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 100.0.4896.60CPE matchmatch criteria | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.