While Microsoft's Security Update Guide supports CVEs assigned by industry partners (such as Chromium), it appears to have switched the numbers around and listed CVE-2022-2294 as the type confusion and 2295 as the WebRTC whoopsie. CVE-2022-1096 ( fixed in March) also suffered from type confusion issues, which could lead to out-of-bounds memory access.Ĭonfusion might also apply to the numbering of the vulnerabilities between tech giants. The issue appears to be bedevilling the search giant's browser project. The other fix in the maintenance release, that should get downloaded automatically, is CVE-2022-2295, which is a type confusion in V8, Google's JavaScript engine. How did you mourn Internet Explorer's passing?.
Google updates Chrome to squash actively exploited WebRTC Zero Day.If you can find and fix this subtle Chromium bug that breaks some extensions, there's $8k waiting for you.Microsoft remained tight-lipped on the matter, merely saying that since Edge "ingests" Chromium, the vulnerabilities had been addressed. Other than an update, there has been precious little information on how to defend against the vulnerability.
0 kommentar(er)
