CVE-2022-1489
Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951...
Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.
- Record
CVE-2022-1489- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.
- Record
CVE-2022-1489- Updated
- 2026-11-02
EUVDEUVD-2022-24790 No score
Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.
- Record
EUVD-2022-24790- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-949f-px3r-jjxq
Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951...
Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.
- Record
GHSA-949f-px3r-jjxq- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-1489
Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.
- Record
ALPINE-CVE-2022-1489- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.
- Record
CVE-2022-1489- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVDEBIAN-CVE-2022-1489
Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.
- Record
DEBIAN-CVE-2022-1489- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVUBUNTU-CVE-2022-1489
Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.
- Record
UBUNTU-CVE-2022-1489- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2022-0158 No score
Updated chromium-browser-stable packages fix security vulnerability
Use after free in Vulkan. (CVE-2022-1477) Use after free in SwiftShader. (CVE-2022-1478) Use after free in ANGLE. (CVE-2022-1479) Use after free in Sharing. (CVE-2022-1481) Inappropriate implementation in WebGL. (CVE-2022-1482) Heap buffer overflow in WebGPU. (CVE-2022-1483) Heap buffer overflow in Web UI Settings. (CVE-2022-1484) Use after free in File System API. (CVE-2022-1485) Type Confusion in V8. (CVE-2022-1486) Use after free in Ozone. (CVE-2022-1487) Inappropriate implementation in Extensions API. (CVE-2022-1488) Out of bounds memory access in UI Shelf. (CVE-2022-1489) Use after free in Browser Switcher. (CVE-2022-1490) Use after free in Bookmarks. (CVE-2022-1491) Insufficient data validation in Blink Editing. (CVE-2022-1492) Use after free in Dev Tools. (CVE-2022-1493) Insufficient data validation in Trusted Types. (CVE-2022-1494) Incorrect security UI in Downloads. (CVE-2022-1495) Use after free in File Manager. (CVE-2022-1496) Inappropriate implementation in Input. (CVE-2022-1497) Inappropriate implementation in HTML Parser. (CVE-2022-1498) Inappropriate implementation in WebAuthentication. (CVE-2022-1499) Insufficient data validation in Dev Tools. (CVE-2022-1500) Inappropriate implementation in iframe. (CVE-2022-1501)
- Record
MGASA-2022-0158- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:0125-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Chromium 101.0.4951.54 (boo#1199118)
Chromium 101.0.4951.41 (boo#1198917):
- CVE-2022-1477: Use after free in Vulkan
- CVE-2022-1478: Use after free in SwiftShader
- CVE-2022-1479: Use after free in ANGLE
- CVE-2022-1480: Use after free in Device API
- CVE-2022-1481: Use after free in Sharing
- CVE-2022-1482: Inappropriate implementation in WebGL
- CVE-2022-1483: Heap buffer overflow in WebGPU
- CVE-2022-1484: Heap buffer overflow in Web UI Settings
- CVE-2022-1485: Use after free in File System API
- CVE-2022-1486: Type Confusion in V8
- CVE-2022-1487: Use after free in Ozone
- CVE-2022-1488: Inappropriate implementation in Extensions API
- CVE-2022-1489: Out of bounds memory access in UI Shelf
- CVE-2022-1490: Use after free in Browser Switcher
- CVE-2022-1491: Use after free in Bookmarks
- CVE-2022-1492: Insufficient data validation in Blink Editing
- CVE-2022-1493: Use after free in Dev Tools
- CVE-2022-1494: Insufficient data validation in Trusted Types
- CVE-2022-1495: Incorrect security UI in Downloads
- CVE-2022-1496: Use after free in File Manager
- CVE-2022-1497: Inappropriate implementation in Input
- CVE-2022-1498: Inappropriate implementation in HTML Parser
- CVE-2022-1499: Inappropriate implementation in WebAuthentication
- CVE-2022-1500: Insufficient data validation in Dev Tools
- CVE-2022-1501: Inappropriate implementation in iframe
- Record
openSUSE-SU-2022:0125-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12046-1 No score
chromedriver-101.0.4951.54-1.1 on GA media
These are all security issues fixed in the chromedriver-101.0.4951.54-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12046-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromiumAlpine:v3.16 |
before 101.0.4951.54-r0 | 101.0.4951.54-r0 |
chromiumAlpine:v3.17 |
before 101.0.4951.54-r0 | 101.0.4951.54-r0 |
chromiumAlpine:v3.18 |
before 101.0.4951.54-r0 | 101.0.4951.54-r0 |
chromiumAlpine:v3.19 |
before 101.0.4951.54-r0 | 101.0.4951.54-r0 |
chromiumAlpine:v3.20 |
before 101.0.4951.54-r0 | 101.0.4951.54-r0 |
chromiumAlpine:v3.21 |
before 101.0.4951.54-r0 | 101.0.4951.54-r0 |
chromiumAlpine:v3.22 |
before 101.0.4951.54-r0 | 101.0.4951.54-r0 |
chromiumAlpine:v3.23 |
before 101.0.4951.54-r0 | 101.0.4951.54-r0 |
chromiumAlpine:v3.24 |
before 101.0.4951.54-r0 | 101.0.4951.54-r0 |
chromiumDebian:12 |
before 101.0.4951.41-1 | 101.0.4951.41-1 |
Show 9 moreShow less
| Package | Affected | Fixed |
|---|---|---|
chromiumDebian:13 |
before 101.0.4951.41-1 | 101.0.4951.41-1 |
chromiumDebian:14 |
before 101.0.4951.41-1 | 101.0.4951.41-1 |
chromiumDebian:11 From an advisory covering 26 CVEs |
before 101.0.4951.41-1~deb11u1, plus listed versions 100.0.4896.127-1100.0.4896.127-1~deb11u1100.0.4896.60-1100.0.4896.60-1~deb11u1100.0.4896.75-1 Show 22 moreShow less100.0.4896.75-1~deb11u1100.0.4896.88-1100.0.4896.88-1~deb11u190.0.4430.212-193.0.4577.82-197.0.4692.71-0.197.0.4692.71-0.1~deb11u197.0.4692.99-197.0.4692.99-1~deb11u197.0.4692.99-1~deb11u298.0.4758.102-198.0.4758.102-1~deb11u198.0.4758.80-198.0.4758.80-1~deb11u199.0.4818.0-0.199.0.4844.51-199.0.4844.51-1~deb11u199.0.4844.51-299.0.4844.74-199.0.4844.74-1~deb11u199.0.4844.84-199.0.4844.84-1~deb11u1 |
101.0.4951.41-1~deb11u1 |
chromium-browser-stableMageia:8 From an advisory covering 24 CVEs |
before 101.0.4951.41-1.mga8 | 101.0.4951.41-1.mga8 |
chromium-browserUbuntu:18.04:LTS |
before 101.0.4951.64-0ubuntu0.18.04.1, plus listed versions 61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1 Show 45 moreShow less63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.177.0.3865.90-0ubuntu0.18.04.178.0.3904.70-0ubuntu0.18.04.278.0.3904.97-0ubuntu0.18.04.178.0.3904.108-0ubuntu0.18.04.179.0.3945.79-0ubuntu0.18.04.179.0.3945.130-0ubuntu0.18.04.180.0.3987.87-0ubuntu0.18.04.180.0.3987.149-0ubuntu0.18.04.180.0.3987.163-0ubuntu0.18.04.181.0.4044.122-0ubuntu0.18.04.181.0.4044.138-0ubuntu0.18.04.183.0.4103.61-0ubuntu0.18.04.184.0.4147.105-0ubuntu0.18.04.185.0.4183.83-0ubuntu0.18.04.285.0.4183.121-0ubuntu0.18.04.186.0.4240.75-0ubuntu0.18.04.186.0.4240.198-0ubuntu0.18.04.187.0.4280.66-0ubuntu0.18.04.189.0.4389.82-0ubuntu0.18.04.1 |
101.0.4951.64-0ubuntu0.18.04.1 |
chromiumSUSE:Package Hub 15 SP3 From an advisory covering 25 CVEs |
before 101.0.4951.54-bp153.2.88.1 | 101.0.4951.54-bp153.2.88.1 |
chromiumopenSUSE:Leap 15.3 From an advisory covering 25 CVEs |
before 101.0.4951.54-bp153.2.88.1 | 101.0.4951.54-bp153.2.88.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 25 CVEs |
before 101.0.4951.54-1.1 | 101.0.4951.54-1.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-1489 is a high vulnerability (CVSS 8.8) in Google Chrome, published April 27, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.04%, the 64th percentile. Fixed in chromium 101.0.4951.54-r0.
References
chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html
crbug.com/1300561
security.gentoo.org/glsa/202208-25
nvd.nist.gov/vuln/detail/CVE-2022-1489
github.com/advisories/GHSA-949f-px3r-jjxq
security.alpinelinux.org/vuln/CVE-2022-1489
Show 194 moreShow less
security-tracker.debian.org/tracker/CVE-2022-1489
advisories.mageia.org/MGASA-2022-0158.html
bugs.mageia.org/show_bug.cgi?id=30350
ubuntu.com/security/CVE-2022-1489
cve.org/CVERecord?id=CVE-2022-1489
lists.opensuse.org/archives/list/[email protected]/thread/MHFVFF55YYOTI45WJ3YWL3TU4PVSG5ZU
bugzilla.suse.com/1198917
suse.com/security/cve/CVE-2022-1477
Left out here: 14 versions and 2,124 references. The JSON record has them.