CVE-2022-2007

Chromium: CVE-2022-2007 Use after free in WebGPU

CVE-2022-2007 is fixed in 8 products on 2 platforms, first by DSA-5163-1, released June 12, 2022. It is not reported as exploited. Patch Radar priority: High.

HighFixed on 2 platforms
CVSS
8.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0105
64th percentile

<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p>

Where it's fixed

ProductFixed inFixReleased
Windows apps
Microsoft Edge Beta 127.0.2651.8 Microsoft Edge Beta 127.0.2651.8 Jun 21, 2024
Microsoft Edge Dev 127.0.2651.8 Microsoft Edge Dev 127.0.2651.8 Jun 21, 2024
Linux
chromium · Debian 11.6 (bullseye) 102.0.5005.115-1~deb11u1 DSA-5163-1 Jun 12, 2022
chromium · Debian 12.15 (bookworm) 102.0.5005.115-1 DEBIAN-CVE-2022-2007 Jul 28, 2022
chromium · Debian 13.5 (trixie) 102.0.5005.115-1 DEBIAN-CVE-2022-2007 Jul 28, 2022
chromium · Debian 14 102.0.5005.115-1 DEBIAN-CVE-2022-2007 Jul 28, 2022
chromium-browser · Ubuntu 18.04.6 LTS (bionic) 103.0.5060.134-0ubuntu0.18.04.1 chromium-browser 103.0.5060.134-0ubuntu0.18.04.1 Jul 27, 2022
chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) 103.0.5060.134-0ubuntu0.18.04.1 chromium-browser-l10n 103.0.5060.134-0ubuntu0.18.04.1 Jul 27, 2022
chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) 103.0.5060.134-0ubuntu0.18.04.1 chromium-chromedriver 103.0.5060.134-0ubuntu0.18.04.1 Jul 27, 2022
chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) 103.0.5060.134-0ubuntu0.18.04.1 chromium-codecs-ffmpeg 103.0.5060.134-0ubuntu0.18.04.1 Jul 27, 2022
chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) 103.0.5060.134-0ubuntu0.18.04.1 chromium-codecs-ffmpeg-extra 103.0.5060.134-0ubuntu0.18.04.1 Jul 27, 2022