Google · Chromium Mojo
CVE-2022-3075
Google Chromium Mojo Insufficient Data Validation Vulnerability
ما هي
Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CISA: Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
ما العمل
Apply updates per vendor instructions.
الموعد النهائي للوكالات الفدرالية الأمريكية: 29 سبتمبر 2022
ثغرات مُستغلّة أخرى من Google
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 27/03/2025 | Sandbox Escape | Chromium Mojo | مرتفع 8.3 | 9.2% |
| 27/10/2026 | Unchecked Return Value | Brotli | حرجة 9.2 | 55% |
| 16/09/2026 | Improper Authorization | Pixel | مرتفع 8.8 | 0.6% |
| 09/09/2026 | Out of Bounds Write | Chromium V8 | مرتفع 8.8 | 3.5% |
| 04/09/2026 | Type Confusion | Chromium V8 | مرتفع 8.8 | 1.8% |
| 09/06/2026 | Out-of-Bounds Read and Write | Chromium V8 | مرتفع 8.8 | 2.4% |
| 01/04/2026 | Use-After-Free | Dawn | مرتفع 8.8 | 14% |
| 13/03/2026 | Out-of-Bounds Write | Skia | مرتفع 8.8 | 2.3% |
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.