CVE-2022-4262
Google Chromium V8 Type Confusion Vulnerability
Published Dec 2, 2022 · updated Jun 16, 2026 · google chrome
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Dec 2, 2022 · Catalog
Detected
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Dec 5, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Dec 26, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Required action
Apply updates per vendor instructions.
CISA due date Dec 26, 2022
Affected
- cpe google/chromeversion unspecified
- vendor Google Chromium V8version unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2022-4262
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
cisa.gov - CVE.orgVulnerability recordCVE-2022-4262
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2022-4262
30-day exploitation probability 23.5%
first.org - NIST NVDVulnerability recordCVE-2022-4262
Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd.nist.gov