CVE-2022-0809
Chromium: CVE-2022-0809 Out of bounds memory access in WebXR
CVE-2022-0809 is fixed in 8 products on 2 platforms, first by DEBIAN-CVE-2022-0809, released April 5, 2022. It is not reported as exploited. Patch Radar priority: High.
HighFixed on 2 platforms
CVSS
8.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0107
65th percentile
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Windows apps | |||
| Microsoft Edge Beta | 127.0.2651.8 | Microsoft Edge Beta 127.0.2651.8 | Jun 21, 2024 |
| Microsoft Edge Dev | 127.0.2651.8 | Microsoft Edge Dev 127.0.2651.8 | Jun 21, 2024 |
| Linux | |||
| chromium · Debian 12.15 (bookworm) | 99.0.4844.51-1 | DEBIAN-CVE-2022-0809 | Apr 5, 2022 |
| chromium · Debian 13.5 (trixie) | 99.0.4844.51-1 | DEBIAN-CVE-2022-0809 | Apr 5, 2022 |
| chromium · Debian 14 | 99.0.4844.51-1 | DEBIAN-CVE-2022-0809 | Apr 5, 2022 |
| chromium-browser · Ubuntu 18.04.6 LTS (bionic) | 99.0.4844.51-0ubuntu0.18.04.1 | chromium-browser 99.0.4844.51-0ubuntu0.18.04.1 | Jan 17, 2025 |
| chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) | 99.0.4844.51-0ubuntu0.18.04.1 | chromium-browser-l10n 99.0.4844.51-0ubuntu0.18.04.1 | Jan 17, 2025 |
| chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) | 99.0.4844.51-0ubuntu0.18.04.1 | chromium-chromedriver 99.0.4844.51-0ubuntu0.18.04.1 | Jan 17, 2025 |
| chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) | 99.0.4844.51-0ubuntu0.18.04.1 | chromium-codecs-ffmpeg 99.0.4844.51-0ubuntu0.18.04.1 | Jan 17, 2025 |
| chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) | 99.0.4844.51-0ubuntu0.18.04.1 | chromium-codecs-ffmpeg-extra 99.0.4844.51-0ubuntu0.18.04.1 | Jan 17, 2025 |