FreeBSD: VID-51496CBC-7A0E-11EC-A323-3065EC8FD3EC (CVE-2022-0303): chromium -- multiple vulnerabilities

Description

Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.

From VID-51496CBC-7A0E-11EC-A323-3065EC8FD3EC:

Chrome Releases reports:

This release contains 26 security fixes, including:

[1284367] Critical CVE-2022-0289: Use after free in Safe

browsing. Reported by Sergei Glazunov of Google Project Zero on

2022-01-05

[1260134][1260007] High CVE-2022-0290: Use after free in Site

isolation. Reported by Brendon Tiszka and Sergei Glazunov of

Google Project Zero on 2021-10-15

[1281084] High CVE-2022-0291: Inappropriate implementation in

Storage. Reported by Anonymous on 2021-12-19

[1270358] High CVE-2022-0292: Inappropriate implementation in

Fenced Frames. Reported by Brendon Tiszka on 2021-11-16

[1283371] High CVE-2022-0293: Use after free in Web packaging.

Reported by Rong Jian and Guang Gong of 360 Alpha Lab on

2021-12-30

[1273017] High CVE-2022-0294: Inappropriate implementation in

Push messaging. Reported by Rong Jian and Guang Gong of 360 Alpha

Lab on 2021-11-23

[1278180] High CVE-2022-0295: Use after free in Omnibox.

Reported by Weipeng Jiang (@Krace) and Guang Gong of 360

Vulnerability Research Institute on 2021-12-09

[1283375] High CVE-2022-0296: Use after free in Printing.

Reported by koocola(@alo_cook) and Guang Gong of 360 Vulnerability

Research Institute on 2021-12-30

[1274316] High CVE-2022-0297: Use after free in Vulkan. Reported

by Cassidy Kim of Amber Security Lab, OPPO Mobile

Telecommunications Corp. Ltd. on 2021-11-28

[1212957] High CVE-2022-0298: Use after free in Scheduling.

Reported by Yangkang (@dnpushme) of 360 ATA on 2021-05-25

[1275438] High CVE-2022-0300: Use after free in Text Input

Method Editor. Reported by Rong Jian and Guang Gong of 360 Alpha

Lab on 2021-12-01

[1276331] High CVE-2022-0301: Heap buffer overflow in DevTools.

Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability

Research on 2021-12-03

[1278613] High CVE-2022-0302: Use after free in Omnibox.

Reported by Weipeng Jiang (@Krace) and Guang Gong of 360

Vulnerability Research Institute on 2021-12-10

[1281979] High CVE-2022-0303: Race in GPU Watchdog. Reported by

Yigit Can YILMAZ (@yilmazcanyigit) on 2021-12-22

[1282118] High CVE-2022-0304: Use after free in Bookmarks.

Reported by Rong Jian and Guang Gong of 360 Alpha Lab on

2021-12-22

[1282354] High CVE-2022-0305: Inappropriate implementation in

Service Worker API. Reported by @uwu7586 on 2021-12-23

[1283198] High CVE-2022-0306: Heap buffer overflow in PDFium.

Reported by Sergei Glazunov of Google Project Zero on

2021-12-29

[1281881] Medium CVE-2022-0307: Use after free in Optimization

Guide. Reported by Samet Bekmezci @sametbekmezci on

2021-12-21

[1282480] Medium CVE-2022-0308: Use after free in Data Transfer.

Reported by @ginggilBesel on 2021-12-24

[1240472] Medium CVE-2022-0309: Inappropriate implementation in

Autofill. Reported by Alesandro Ortiz on 2021-08-17

[1283805] Medium CVE-2022-0310: Heap buffer overflow in Task

Manager. Reported by Samet Bekmezci @sametbekmezci on

2022-01-03

[1283807] Medium CVE-2022-0311: Heap buffer overflow in Task

Manager. Reported by Samet Bekmezci @sametbekmezci on

2022-01-03