Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2022-2294

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 8.8 · HighBuzz score 72.5KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 72.5

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 30.0 · diversity 17.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
30.0
22 evidence mentions in the snapshot
Diversity score
17.5
7 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
22 source links · newest first
  • 55 zero-day flaws exploited last year show the importance of security risk managementCSO Online

    Deploying security patches as quickly as possible remains one of the best ways to prevent most security breaches, as attackers usually rely on exploits for publicly known vulnerabilities that have a patch available — the so-called n-day exploits. But mitigating the risk from vulnerabilities unknown to the affected software developers and don’t have a patch […]

    newswww.csoonline.comMar 22, 2023, 7:38 PM
  • Google fixed the ninth actively exploited Chrome zeroday this yearSecurity Affairs

    Google released security updates to address a new Chrome zero-day flaw, tracked as CVE-2022-4262, actively exploited in the wild. Google rolled out an emergency security update for the Chrome web browser to address a new zero-day vulnerability, tracked as CVE-2022-4262, that is actively exploited. The CVE-2022-4262 vulnerability is a type confusion bug in the V8 […]

    newssecurityaffairs.comDec 3, 2022, 3:24 PM
  • Google fixed the eighth actively exploited #Chrome #zeroday this yearSecurity Affairs

    Google on Thursday released security updates to address a new zero-day vulnerability, tracked as CVE-2022-4135, impacting the Chrome web browser. Google rolled out an emergency security update for the desktop version of the Chrome web browser to address a new zero-day vulnerability, tracked as CVE-2022-4135, that is actively exploited. The CVE-2022-4135 vulnerability is a heap […]

    newssecurityaffairs.comNov 25, 2022, 1:50 PM
  • Google rolls out patch for high-severity Chrome browser zero dayITPro

    tion on the widely used metric. Google assigned the vulnerability with a CVE for vulnerability tracking and management (CVE-2022-4135) and released the new stable channel version of Google Chrome on Thursday across Windows, macOS, and Linux. Google said it will be keeping more detailed information on the vulnerability under wraps until more users have

    newswww.itpro.comNov 25, 2022, 10:17 AM
  • Google fixes a new actively exploited Chrome zero-day, it is the seventh one this yearSecurity Affairs

    Google Thursday released an emergency patch for Chrome 107 to address the actively exploited zero-day vulnerability CVE-2022-3723. Google released an emergency update for the Chrome 107 to address an actively exploited zero-day vulnerability tracked as CVE-2022-3723. The CVE-2022-3723 flaw is a type confusion issue that resides in the Chrome V8 Javascript engine. The flaw has been reported […]

    newssecurityaffairs.comOct 28, 2022, 1:00 PM
  • Google Releases Emergency Chrome 107 Update to Patch Actively Exploited Zero-DaySecurityWeek

    Google on Thursday released an emergency update for Chrome 107 to patch an actively exploited zero-day vulnerability.

    newswww.securityweek.comOct 28, 2022, 9:29 AM
  • Google Patches Sixth Chrome Zero-Day of 2022SecurityWeek

    Google has released an emergency update to patch a high-severity vulnerability in its Chrome web browser that is already being exploited in the wild.

    newswww.securityweek.comSep 6, 2022, 3:44 PM
  • Zero-day puts a dent in Chrome’s mojoMalwarebytes Labs

    On Friday, Google announced the release of a new version of its Chrome browser that includes a security fix for a…

    newswww.malwarebytes.comSep 4, 2022, 5:00 PM
  • Google rolled out emergency fixes to address actively exploited Chrome zero-daySecurity Affairs

    Google rolled out emergency fixes to address a vulnerability in the Chrome web browser that is being actively exploited in the wild. Google on Friday released emergency fixes to address a vulnerability, tracked as CVE-2022-3075, in the Chrome web browser that is being actively exploited in the wild. The CVE-2022-3075 flaw is caused by insufficient data […]

    newssecurityaffairs.comSep 3, 2022, 3:37 PM
  • CISA adds 10 new flaws to its Known Exploited Vulnerabilities CatalogSecurity Affairs

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added 10 new flaws to its Known Exploited Vulnerabilities Catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added 10 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, including a high-severity security flaw (CVE-2021-38406 CVSS score: 7.8) impacting Delta Electronics industrial automation software. According to Binding Operational Directive (BOD) 22-01: […]

    newssecurityaffairs.comAug 29, 2022, 9:03 AM
  • CISA: Vulnerability in ​​Delta Electronics ICS Software Exploited in AttacksSecurityWeek

    A vulnerability affecting industrial automation software from Delta Electronics appears to have been exploited in attacks, and the US Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations to take action as soon as possible.

    newswww.securityweek.comAug 26, 2022, 10:28 AM
  • Google fixed a new Chrome Zero-Day actively exploited in the wildSecurity Affairs

    Google addressed a dozen vulnerabilities in the Chrome browser, including the fifth Chrome zero-day flaw exploited this year. Google this week released security updates to address a dozen vulnerabilities in its Chrome browser for desktops including an actively exploited high-severity zero-day flaw in the wild. The actively exploited flaw, tracked as CVE-2022-2856, is an Insufficient validation […]

    newssecurityaffairs.comAug 17, 2022, 5:01 PM
  • Google Paid Out $90,000 for Vulnerabilities Patched by Chrome 104SecurityWeek

    Google has patched 27 vulnerabilities with the release of Chrome 104 on Tuesday, and the researchers who reported some of these security holes earned thousands of dollars in bug bounties.

    newswww.securityweek.comAug 3, 2022, 10:54 AM
  • Chrome Flaw Exploited by Israeli Spyware Firm Also Impacts Edge, SafariSecurityWeek

    A recently patched Chrome vulnerability that appears to have been exploited by an Israeli spyware company also impacts Microsoft’s Edge and Apple’s Safari web browsers.

    newswww.securityweek.comJul 22, 2022, 3:30 PM
  • Candiru surveillance spyware DevilsTongue exploited Chrome Zero-Day to target journalistsSecurity Affairs

    The spyware developed by Israeli surveillance firm Candiru exploited recently fixed CVE-2022-2294 Chrome zero-day in attacks on journalists. Researchers from the antivirus firm Avast reported that the DevilsTongue spyware, developed, by Israeli surveillance firm Candiru, was used in attacks against journalists in the Middle East and exploited recently fixed CVE-2022-2294 Chrome zero-day. The flaw, which […]

    newssecurityaffairs.comJul 22, 2022, 8:32 AM
  • Exploitation of Recent Chrome Zero-Day Linked to Israeli Spyware CompanySecurityWeek

    An actively exploited Chrome zero-day that Google patched on July 4 has been linked to an Israeli spyware company and used in targeted attacks aimed at entities in the Middle East.

    newswww.securityweek.comJul 21, 2022, 12:40 PM
  • Apple fixes multiple flaws in iOS, iPadOS, macOS, tvOS, and watchOS devicesSecurity Affairs

    Apple released security updates to address multiple vulnerabilities that affect iOS, iPadOS, macOS, tvOS, and watchOS devices. Apple released security updates to fix 37 vulnerabilities impacting iOS, iPadOS, macOS, tvOS, and watchOS devices. The flaws addressed by Apple lead to arbitrary code execution, privilege escalation, denial-of-service (DoS), and information disclosure. Below is the list of Apple […]

    newssecurityaffairs.comJul 21, 2022, 9:22 AM
  • 11th July – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 11th July, please download our Threat Intelligence Bulletin. Top Attacks and Breaches An anonymous hacker identified as “ChinaDan” has claimed to have a stolen a database from the Shanghai National Police (SHGA) that includes sensitive data of 1 billion Chinese citizens, and offered to […]

    vendorresearch.checkpoint.comJul 11, 2022, 1:13 PM
  • July 2022 Patch Tuesday forecast: A summertime lull?Help Net Security

    June 2022 Patch Tuesday wrapped up a few loose ends we were waiting on. The Follina remote code execution vulnerability in the Microsoft Windows Support Diagnostic Tool (MSDT) was fixed. Internet Explorer came to a quiet end in most versions of the Windows 10 operating system. And finally, the Phase 2 update for CVE-2021-26414, the DCOM server security feature bypass was released. With those major updates now in place, could we see a summertime lull … More →

    newswww.helpnetsecurity.comJul 8, 2022, 5:01 AM
  • Google fixes the fourth Chrome zero-day in 2022Security Affairs

    Google addressed a high-severity zero-day Chrome vulnerability actively exploited in the wild, it is the fourth zero-day patched in 2022. Google has released Chrome 103.0.5060.114 for Windows to fix a high-severity zero-day Chrome vulnerability, tracked as CVE-2022-2294, which is actively exploited in the wild. The flaw is a heap buffer overflow that resides in the […]

    newssecurityaffairs.comJul 4, 2022, 9:16 PM
  • Emergency Chrome 103 Update Patches Actively Exploited VulnerabilitySecurityWeek

    While many expected — or at least hoped — that the 4th of July would be quiet on the cybersecurity front, Google on Monday announced the release of an emergency Chrome update that patches an actively exploited zero-day vulnerability.

    newswww.securityweek.comJul 4, 2022, 8:54 PM
  • Update now! Chrome patches ANOTHER zero-day vulnerabilityMalwarebytes Labs

    Google has released version 103.0.5060.114 for Chrome, now available in the Stable Desktop channel worldwide. The main goal of this new…

    newswww.malwarebytes.comJul 4, 2022, 5:00 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence