CVE-2022-3653

CVE-2022-3653 is a high-severity heap buffer overflow vulnerability affecting Google Chrome versions prior to 107.0.5304.62. A remote attacker could exploit this flaw by enticing a user to visit a crafted HTML page, potentially leading to heap corruption. The vulnerability carries a CVSS score of 8.8 (High), indicating a network-based attack with low complexity, requiring user interaction, and resulting in high impacts to confidentiality, integrity, and availability. While Google has paid out bounties for this vulnerability, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion beyond a single media article.