Name: CVE-2022-1096: Access of Resource Using Incompatible Type
Published: 2022-07-22T00:00:00.000Z
Keywords: CVE, CVE-2022-1096, CWE-843, Exploited in the Wild, CISA KEV Exploit, Zero Day, CVSS 8.8, EPSS 0.23485, CISA KEV

Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS Details

CVSS 3.1 Base Score: 8.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	View advisory ↗View advisory ↗	alpine-linux-upgrade-chromiumalpine-linux-upgrade-qt5-qtwebengine	Aug 22, 2024	Jul 22, 2022
Arch Linux	View advisory ↗View advisory ↗View advisory ↗View advisory ↗	arch-linux-upgrade-latest	Jul 11, 2025	Jul 22, 2022
Debian	View advisory ↗	debian-upgrade-chromium	Nov 4, 2022	Jul 23, 2022
Freebsd	View advisory ↗	freebsd-upgrade-package-chromium	Nov 4, 2022	Mar 25, 2022
Gentoo Linux	View advisory ↗	gentoo-linux-upgrade-dev-qt-qtwebenginegentoo-linux-upgrade-www-client-chromiumgentoo-linux-upgrade-www-client-google-chromegentoo-linux-upgrade-www-client-microsoft-edge	Aug 16, 2022	Jul 23, 2022
Google Chrome	View advisory ↗View advisory ↗View advisory ↗	google-chrome-upgrade-latest	Mar 28, 2022	Mar 28, 2022
Microsoft Edge	View advisory ↗View advisory ↗	microsoft-edge-upgrade-latest	Mar 28, 2022	Mar 26, 2022
Microsoft Visual_studio	View advisory ↗View advisory ↗	microsoft-visual_studio_2022-upgrade-latest-ltsc_17_0microsoft-visual_studio_2022-upgrade-latest-current_channel	Jun 25, 2025	Mar 26, 2022
Suse	—	suse-upgrade-chromedriversuse-upgrade-chromiumsuse-upgrade-libqt5-qtwebenginesuse-upgrade-opera	Oct 26, 2022	Jul 23, 2022
Ubuntu	View advisory ↗	ubuntu-upgrade-chromium-browser	Mar 30, 2022	Jan 18, 2022

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub