# CVE-2022-0809: Chromium: CVE-2022-0809 Out of bounds memory access in WebXR

CVE-2022-0809 is fixed in 8 products on 2 platforms, first by DEBIAN-CVE-2022-0809, released April 5, 2022. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2022-0809
- Priority: High
- CVSS: 8.8 (high)
- EPSS: 0.0107
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Mar 3, 2022
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0809

## Description

<p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p>

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Microsoft Edge Beta | 127.0.2651.8 | [Microsoft Edge Beta 127.0.2651.8](https://patchblox.com/security/data/fix/windows-app/microsoft.edge.beta-127.0.2651.8.md) | Jun 21, 2024 |
| Windows apps | Microsoft Edge Dev | 127.0.2651.8 | [Microsoft Edge Dev 127.0.2651.8](https://patchblox.com/security/data/fix/windows-app/microsoft.edge.dev-127.0.2651.8.md) | Jun 21, 2024 |
| Linux | chromium Debian 12.15 (bookworm) | 99.0.4844.51-1 | [DEBIAN-CVE-2022-0809](https://patchblox.com/security/data/fix/linux/debian-cve-2022-0809.md) | Apr 5, 2022 |
| Linux | chromium Debian 13.5 (trixie) | 99.0.4844.51-1 | [DEBIAN-CVE-2022-0809](https://patchblox.com/security/data/fix/linux/debian-cve-2022-0809.md) | Apr 5, 2022 |
| Linux | chromium Debian 14 | 99.0.4844.51-1 | [DEBIAN-CVE-2022-0809](https://patchblox.com/security/data/fix/linux/debian-cve-2022-0809.md) | Apr 5, 2022 |
| Linux | chromium-browser Ubuntu 18.04.6 LTS (bionic) | 99.0.4844.51-0ubuntu0.18.04.1 | [chromium-browser 99.0.4844.51-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-chromium-browser-99.0.4844.51-0ubuntu0.18.04.1.md) | Jan 17, 2025 |
| Linux | chromium-browser-l10n Ubuntu 18.04.6 LTS (bionic) | 99.0.4844.51-0ubuntu0.18.04.1 | [chromium-browser-l10n 99.0.4844.51-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-chromium-browser-l10n-99.0.4844.51-0ubuntu0.18.04.1.md) | Jan 17, 2025 |
| Linux | chromium-chromedriver Ubuntu 18.04.6 LTS (bionic) | 99.0.4844.51-0ubuntu0.18.04.1 | [chromium-chromedriver 99.0.4844.51-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-chromium-chromedriver-99.0.4844.51-0ubuntu0.18.04.1.md) | Jan 17, 2025 |
| Linux | chromium-codecs-ffmpeg Ubuntu 18.04.6 LTS (bionic) | 99.0.4844.51-0ubuntu0.18.04.1 | [chromium-codecs-ffmpeg 99.0.4844.51-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-99.0.4844.51-0ubuntu0.18.04.1.md) | Jan 17, 2025 |
| Linux | chromium-codecs-ffmpeg-extra Ubuntu 18.04.6 LTS (bionic) | 99.0.4844.51-0ubuntu0.18.04.1 | [chromium-codecs-ffmpeg-extra 99.0.4844.51-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-extra-99.0.4844.51-0ubuntu0.18.04.1.md) | Jan 17, 2025 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo