Critical severity9.6NVD Advisory· Published Jul 29, 2023· Updated Jun 17, 2026
CVE-2022-4920
CVE-2022-4920
Description
Heap buffer overflow in Blink in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
4- crbug.com/1306861nvdExploitIssue TrackingVendor Advisory
- chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.htmlnvdRelease NotesVendor Advisory
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/nvd
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/nvd
News mentions
0No linked articles in our index yet.