CVE-2022-4262
HIGH KEVGoogle Chrome < 108.0.5359.94 - Type Confusion in V8 via Crafted HTML Page
Title source: llmExploitation Summary
CVE-2022-4262 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added December 5, 2022. EIP tracks 3 public exploits from researchers including bjrjk, mistymntncop, quangnh89.
AI-analyzed exploit summary This repository contains a writeup and analysis of CVE-2022-4262, including root cause, PoC, exploit details, and slides. No actual exploit code is present in the provided files.
Description
Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Exploits (3)
This repository contains a writeup and analysis of CVE-2022-4262, including root cause, PoC, exploit details, and slides. No actual exploit code is present in the provided files.
This is a working proof-of-concept exploit for CVE-2022-4262, a type confusion vulnerability in Chromium's V8 JavaScript engine. The exploit leverages memory corruption via the SetNamedProperty instruction to achieve arbitrary read/write primitives.
This repository contains a README file describing a full analysis of CVE-2022-4262, including root cause, PoC, and exploit details. However, no actual exploit code or technical details are provided in the snippet.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H