CVE-2022-3311 is a use-after-free vulnerability in Google Chrome versions prior to 106.0.5249.62, specifically within the 'import' functionality. This medium-severity flaw (CVSS 6.5) could allow a remote attacker, after compromising a WebUI process, to achieve a sandbox escape through a specially crafted HTML page. While the vulnerability requires user interaction and prior compromise, it carries a high impact on integrity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion, though it was mentioned in a broader Patch Tuesday article.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 106.0.5249.62CPE match | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.