Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Mar 1, 2022

CVE-2022-0609

High
EPSS 39.5%CISA KEV
Google/Chromium Animation

Description

Google Chromium Animation contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

EPSS — Exploit Probability

39.5%

Higher than 97.2% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2022-0609

Related Articles (1)

Malware & Threats

Google Patches Chrome’s Fifth Zero-Day of the Year

An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack.

Aug 18, 2022

Risk Assessment

ELEVATED
In CISA KEV

Details

Severity
High
EPSS
39.5%
CISA KEV
Yes
Ransomware
Unknown
Articles
1

Timeline

Published

Feb 15, 2022

Added to KEV

Feb 15, 2022

Remediation Due

Mar 1, 2022

Affected Product

Google

Chromium Animation

View all Google CVEs

External Links

NVD (NIST)CVE DetailsMITRE CVE