CVE-2022-0974
Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a...
Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
- Record
CVE-2022-0974- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List No score
Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
- Record
CVE-2022-0974- Updated
- 2026-11-02
EUVDEUVD-2022-15971 No score
Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
- Record
EUVD-2022-15971- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6r9w-h2x2-322m
Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a...
Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
- Record
GHSA-6r9w-h2x2-322m- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
OSV
Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
- Record
CVE-2022-0974- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-0974
Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
- Record
DEBIAN-CVE-2022-0974- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
Show 5 moreShow less
OSVUBUNTU-CVE-2022-0974
Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
- Record
UBUNTU-CVE-2022-0974- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2022-0107 No score
Updated chromium-browser-stable packages fix security vulnerability
The chromium-browser-stable package has been updated to the 99.0.4844.74 version that fixes multiples security vulnerabilities.
[1299422] Critical CVE-2022-0971: Use after free in Blink Layout. [1301320] High CVE-2022-0972: Use after free in Extensions. [1297498] High CVE-2022-0973: Use after free in Safe Browsing. [1291986] High CVE-2022-0974 : Use after free in Splitscreen. [1295411] High CVE-2022-0975: Use after free in ANGLE. [1296866] High CVE-2022-0976: Heap buffer overflow in GPU. [1299225] High CVE-2022-0977: Use after free in Browser UI. [1299264] High CVE-2022-0978: Use after free in ANGLE. [1302644] High CVE-2022-0979: Use after free in Safe Browsing. [1302157] Medium CVE-2022-0980: Use after free in New Tab Page.
- Record
MGASA-2022-0107- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:0085-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Update to version 99.0.4844.74 (boo#1197163)
- CVE-2022-0971: Use after free in Blink Layout
- CVE-2022-0972: Use after free in Extensions
- CVE-2022-0973: Use after free in Safe Browsing
- CVE-2022-0974: Use after free in Splitscreen
- CVE-2022-0975: Use after free in ANGLE
- CVE-2022-0976: Heap buffer overflow in GPU
- CVE-2022-0977: Use after free in Browser UI
- CVE-2022-0978: Use after free in ANGLE
- CVE-2022-0979: Use after free in Safe Browsing
- CVE-2022-0980: Use after free in New Tab Page
- Various fixes from internal audits, fuzzing and other initiatives
- Record
openSUSE-SU-2022:0085-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11932-1 No score
chromedriver-99.0.4844.74-1.1 on GA media
These are all security issues fixed in the chromedriver-99.0.4844.74-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11932-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromiumDebian:12 |
before 99.0.4844.74-1 | 99.0.4844.74-1 |
chromiumDebian:13 |
before 99.0.4844.74-1 | 99.0.4844.74-1 |
chromiumDebian:14 |
before 99.0.4844.74-1 | 99.0.4844.74-1 |
chromiumDebian:11 From an advisory covering 10 CVEs |
before 99.0.4844.74-1~deb11u1, plus listed versions 90.0.4430.212-193.0.4577.82-197.0.4692.71-0.197.0.4692.71-0.1~deb11u197.0.4692.99-1 Show 10 moreShow less97.0.4692.99-1~deb11u197.0.4692.99-1~deb11u298.0.4758.102-198.0.4758.102-1~deb11u198.0.4758.80-198.0.4758.80-1~deb11u199.0.4818.0-0.199.0.4844.51-199.0.4844.51-1~deb11u199.0.4844.51-2 |
99.0.4844.74-1~deb11u1 |
chromium-browser-stableMageia:8 From an advisory covering 10 CVEs |
before 99.0.4844.74-1.mga8 | 99.0.4844.74-1.mga8 |
chromium-browserUbuntu:18.04:LTS |
before 99.0.4844.84-0ubuntu0.18.04.1, plus listed versions 61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1 Show 45 moreShow less63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.177.0.3865.90-0ubuntu0.18.04.178.0.3904.70-0ubuntu0.18.04.278.0.3904.97-0ubuntu0.18.04.178.0.3904.108-0ubuntu0.18.04.179.0.3945.79-0ubuntu0.18.04.179.0.3945.130-0ubuntu0.18.04.180.0.3987.87-0ubuntu0.18.04.180.0.3987.149-0ubuntu0.18.04.180.0.3987.163-0ubuntu0.18.04.181.0.4044.122-0ubuntu0.18.04.181.0.4044.138-0ubuntu0.18.04.183.0.4103.61-0ubuntu0.18.04.184.0.4147.105-0ubuntu0.18.04.185.0.4183.83-0ubuntu0.18.04.285.0.4183.121-0ubuntu0.18.04.186.0.4240.75-0ubuntu0.18.04.186.0.4240.198-0ubuntu0.18.04.187.0.4280.66-0ubuntu0.18.04.189.0.4389.82-0ubuntu0.18.04.1 |
99.0.4844.84-0ubuntu0.18.04.1 |
chromiumSUSE:Package Hub 15 SP3 From an advisory covering 10 CVEs |
before 99.0.4844.74-bp153.2.69.1 | 99.0.4844.74-bp153.2.69.1 |
chromiumopenSUSE:Leap 15.3 From an advisory covering 10 CVEs |
before 99.0.4844.74-bp153.2.69.1 | 99.0.4844.74-bp153.2.69.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 10 CVEs |
before 99.0.4844.74-1.1 | 99.0.4844.74-1.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-0974 is a high vulnerability (CVSS 8.8) in Google Chrome, published March 18, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.90%, the 59th percentile. Fixed in chromium 99.0.4844.74-1.
References
chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_15.html
crbug.com/1291986
security.gentoo.org/glsa/202208-25
nvd.nist.gov/vuln/detail/CVE-2022-0974
github.com/advisories/GHSA-6r9w-h2x2-322m
security-tracker.debian.org/tracker/CVE-2022-0974
Show 194 moreShow less
advisories.mageia.org/MGASA-2022-0107.html
bugs.mageia.org/show_bug.cgi?id=30183
ubuntu.com/security/CVE-2022-0974
cve.org/CVERecord?id=CVE-2022-0974
lists.opensuse.org/archives/list/[email protected]/thread/4Z4LLOJXXGP4GXUSNG4BEUSYEPI3FBAL
bugzilla.suse.com/1197163
suse.com/security/cve/CVE-2022-0971
Left out here: 12 versions and 2,123 references. The JSON record has them.