Chrome Security Update: 26 Vulnerabilities Fixed (CVE-2022-3038, UAF, Type Confusion)

Key Vulnerability Information Summary Security Fixes and Rewards This update includes 26 security fixes. Multiple vulnerabilities at Critical, High, Medium, and Low severity levels have been addressed. Vulnerability Details CVE-2022-3038: Critical severity, use-after-free vulnerability in network services, reported by Sergei Glazunov of Google Project Zero. CVE-2022-4912: High severity, type confusion vulnerability in MathML, reported by an anonymous researcher. CVE-2022-3039: High severity, use-after-free vulnerability in WebSQL, reported by Nan Wang and Guang Gong. CVE-2022-3040: High severity, use-after-free vulnerability in Layout, reported by an anonymous researcher. CVE-2022-3041: High severity, use-after-free vulnerability in WebSQL, reported by Ziling Chen and Nan Wang. CVE-2022-3042: High severity, use-after-free vulnerability in PhoneHub, reported by koocola and Guang Gong. CVE-2022-3043: High severity, heap buffer overflow vulnerability in Screen Capture, reported by @ginggilBesel. CVE-2022-3044: High severity, improper implementation in Site Isolation, reported by Lucas Pinheiro. CVE-2022-3045: High severity, insufficient validation of untrusted input in V8, reported by Ben Noordhuis. CVE-2022-3046: High severity, use-after-free vulnerability in Browser Tag, reported by Rong Jian of VRI. CVE-2022-3071: High severity, use-after-free vulnerability in Tab Strip, reported by @ginggilBesel. CVE-2022-4913: High severity, improper implementation in Extensions, reported by Jun Kokatsu. CVE-2022-3047: Medium severity, insufficient policy enforcement in Extensions API, reported by Maurice Dauer. CVE-2022-3048: Medium severity, improper implementation in Chrome OS lock screen, reported by Andr.Ess. Acknowledgments Thank you to all security researchers who collaborated with Google during the development cycle to prevent security vulnerabilities from reaching the stable channel. Tools Many security vulnerabilities were detected using tools such as AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, and AFL.

Goal Reached Thanks to every supporter — we hit 100%!

Chrome Security Update: 26 Vulnerabilities Fixed (CVE-2022-3038, UAF, Type Confusion)