March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory –Multiple IBM Sterling Partner Engagement Manager Vulnerabilities
July 20, 2022
Rewterz Threat Alert – Cobalt Strike Malware – Active IOCs
July 21, 2022
Rewterz Threat Advisory –Multiple IBM Sterling Partner Engagement Manager Vulnerabilities
July 20, 2022
Rewterz Threat Alert – Cobalt Strike Malware – Active IOCs
July 21, 2022
Severity
High
Analysis Summary
CVE-2022-2481 CVSS:8.8
Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in Views. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
CVE-2022-2480 CVSS:8.8
Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in Service Worker API. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
CVE-2022-2479 CVSS:6.5
Google Chrome could allow a remote attacker to bypass security restrictions, caused by insufficient validation of untrusted input in File. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to bypass security restrictions.
CVE-2022-2478 CVSS:8.8
Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in PDF. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
CVE-2022-2477 CVSS:8.8
Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in Guest View. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
Impact
- Code Execution
- Security Bypass
Indicators Of Compromise
CVE
- CVE-2022-2481
- CVE-2022-2480
- CVE-2022-2479
- CVE-2022-2478
- CVE-2022-2477
Affected Vendors
Affected Products
Google Chrome 103.0
Remediation
upgrade to the latest version of Chrome, available from the Google Chrome Releases Web site.
Google Chrome Releases Website