CVE-2022-4262 PoC — Google Chrome 安全漏洞

Source

https://github.com/mistymntncop/CVE-2022-4262

Associated Vulnerability

Title:Google Chrome 安全漏洞 (CVE-2022-4262)
Description:Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Readme

Exploit for CVE-2022-4262
=====================
- Official Chromium [bug report][1].
- Shoutout to [@_clem1](https://twitter.com/_clem1) for [finding the ITW exploit][2].
- Shoutout to [@5aelo](https://twitter.com/5aelo) for his [RCA on the bug][3].
- Shoutout to [@bjrjk](https://twitter.com/bjrjk) for his [super indepth RCA on the bug][4].
- Shoutout to [@alisaesage](https://twitter.com/alisaesage) for her [video on the bug][5].

[1]: https://bugs.chromium.org/p/chromium/issues/detail?id=1394403
[2]: https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop.html
[3]: https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-4262.html
[4]: https://github.com/bjrjk/CVE-2022-4262/blob/main/CVE-2022-4262.md
[5]: https://youtu.be/WouAptHlyC4?t=2078

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →