Actively exploited in the wild
WebRTC Heap Buffer Overflow Vulnerability
WebRTC - WebRTC · Listed in the CISA KEV since 2022-08-25. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2022-2294
HighCVSS 8.8KEVExploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Risk Assessment
The risk includes potential remote code execution or browser crash, which could lead to user security compromise.
Recommendation
It is recommended to update Google Chrome to the latest version and avoid opening untrusted HTML pages.
Original NVD description (English source)
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.