Every CVE Search/ Get API key

CVE-2022-3886

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote...

8.8 HighFix available

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.91%Down 0.1 points since Nov 9, 2022
90%50%10%1%

What each source reports

NVD Score used 8.8

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
CVE-2022-3886
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
CVE List 8.8

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
CVE-2022-3886
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2022-43222 8.8

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
EUVD-2022-43222
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-m3hm-86gc-f5c7 8.8

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote...

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrome security severity: High)

Record
GHSA-m3hm-86gc-f5c7
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSV 8.8

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
CVE-2022-3886
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-3886 8.8

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
DEBIAN-CVE-2022-3886
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
Show 6 moreShow less
OSVUBUNTU-CVE-2022-3886 8.8

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Record
UBUNTU-CVE-2022-3886
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2022:10201-1 No score

Security update for chromium

This update for chromium fixes the following issues:

  • Chromium 107.0.5304.110 (boo#1205221)
    • CVE-2022-3885: Use after free in V8
    • CVE-2022-3886: Use after free in Speech Recognition
    • CVE-2022-3887: Use after free in Web Workers
    • CVE-2022-3888: Use after free in WebCodecs
    • CVE-2022-3889: Type Confusion in V8
    • CVE-2022-3890: Heap buffer overflow in Crashpad
Record
openSUSE-SU-2022:10201-1
Updated
2026-11-02
OSVopenSUSE-SU-2022:10239-1 No score

Security update for opera

This update for opera fixes the following issues:

Update to 93.0.4585.37

  • DNA-102885 Turn on #sidebar-autohide on all streams
  • DNA-103020 Turn on #start-page-redesign on developer
  • DNA-103042 Fix import from Firefox
  • DNA-103222 [Speed Dial Suggestions] All opera.com subpages suggestions lead to the opera.com homepage
  • DNA-103368 TikTok videos starting to play automaticly
  • DNA-103535 Startpage preview is not visible
  • DNA-103665 Reduce Tik Tok pane width

Changes in 93.0.4585.21

  • CHR-9067 Update chromium on desktop-stable-107-4585 to 107.0.5304.110
  • DNA-102365 Turn off opera://dify-cards page
  • DNA-102689 [GX] Create GX widgets section in Easy Setup
  • DNA-102768 [Easy setup] Sidebar options not animated
  • DNA-102872 No animation for opening sidebar while sidebar is closing
  • DNA-102929 [Weather][Private window] Weather widget appears in private window
  • DNA-103032 Messenger sidebar icon doesn’t look great
  • DNA-103046 Opera crash with flag –with-feature:sidebar-autohide=off
  • DNA-103107 Automatic video popout for popular sports sites – World Cup
  • DNA-103310 hideOperaObject() in browser.js stopped working on public builds
  • DNA-103320 Crash at chrome::FindBrowserByType(absl::optional)
  • DNA-103321 Tab preview causes freeze when dragging tabs
  • DNA-103375 [Workspaces] Crash at absl::raw_log_internal:: RawLog(absl::LogSeverity, char const*, int, char const*, …)
  • DNA-103395 Remove unused resources
  • DNA-103396 Internal translations
  • The update to chromium 107.0.5304.110 fixes following issues:
    CVE-2022-3885, CVE-2022-3886, CVE-2022-3887, CVE-2022-3888, CVE-2022-3889, CVE-2022-3889
Record
openSUSE-SU-2022:10239-1
Updated
2026-11-02
OSVopenSUSE-SU-2023:0115-1 No score

Security update for opera

This update for opera fixes the following issues:

  • Update to 99.0.4788.13

    • CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127
    • DNA-107317 __delayLoadHelper2 crash in crashreporter

  • The update to chromium 113.0.5672.127 fixes following issues: CVE-2023-2721, CVE-2023-2722, CVE-2023-2723, CVE-2023-2724, CVE-2023-2725, CVE-2023-2726

  • Update to 99.0.4788.9

    • CHR-9283 Update Chromium on desktop-stable-113-4788 to 113.0.5672.93
    • DNA-107638 Translations for O99
    • DNA-107678 Crash Report [@ BrowserContextKeyedServiceFactory:: BrowserContextKeyedServiceFactory(char const*, BrowserContextDependencyManager*) ]
    • DNA-107795 Fix wrong german translation of 'Close All Duplicate Tabs'
    • DNA-107800 Fonts on section#folder and AddSitePanel not readable when animated wallpaper chosen
    • DNA-107840 Promote O99 to stable

  • Update to 98.0.4759.39

    • DNA-102363 ChromeFileSystemAccessPermissionContextTest. ConfirmSensitiveEntryAccess_DangerousFile fails
    • DNA-105534 [Add to Opera] Incorrect scroll on modal when browser window size is too small
    • DNA-106649 Opening new tab when pinned tab is active gives 2 active tabs
    • DNA-107226 Speed Dial freezes and empty space remains after Continue booking tile dragging
    • DNA-107435 Building archive_source_release target fails
    • DNA-107441 [Start page] Right mouse click on tile in continue on section opens target site in current tab
    • DNA-107508 Crash at permissions::PermissionRecoverySuccessRate Tracker::TrackUsage(ContentSettingsType)
    • DNA-107528 Handle real-time SD impression reporting
    • DNA-107546 Context menus broken with one workspace
    • DNA-107548 Paste from Context Menu doesn’t work for Search on StartPage
    • DNA-107560 Optimize real-time SD impression reporting
Record
openSUSE-SU-2023:0115-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12494-1 No score

chromedriver-107.0.5304.110-1.1 on GA media

These are all security issues fixed in the chromedriver-107.0.5304.110-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12494-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12948-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
chromium
Debian:12
 before 107.0.5304.110-1
107.0.5304.110-1
chromium
Debian:13
 before 107.0.5304.110-1
107.0.5304.110-1
chromium
Debian:14
 before 107.0.5304.110-1
107.0.5304.110-1
chromium
Debian:11
From an advisory covering 6 CVEs
 before 107.0.5304.110-1~deb11u1, plus listed versions
100.0.4896.127-1100.0.4896.127-1~deb11u1100.0.4896.60-1100.0.4896.60-1~deb11u1100.0.4896.75-1
Show 45 moreShow less
100.0.4896.75-1~deb11u1100.0.4896.88-1100.0.4896.88-1~deb11u1101.0.4951.41-1101.0.4951.41-1~deb11u1101.0.4951.41-2101.0.4951.54-1101.0.4951.64-1101.0.4951.64-1~deb11u1102.0.5005.115-1102.0.5005.115-1~deb11u1102.0.5005.61-1102.0.5005.61-1~deb11u1103.0.5060.114-1103.0.5060.114-1~deb11u1103.0.5060.134-1103.0.5060.134-1~deb11u1103.0.5060.53-1103.0.5060.53-1~deb11u1104.0.5112.101-1104.0.5112.101-1~deb11u1104.0.5112.79-1104.0.5112.79-1~deb11u1105.0.5195.102-1105.0.5195.102-1~deb11u1105.0.5195.125-1105.0.5195.125-1~deb11u1105.0.5195.52-1105.0.5195.52-1~deb11u1106.0.5249.103-1106.0.5249.103-2106.0.5249.119-1106.0.5249.119-1~deb11u1106.0.5249.61-1106.0.5249.61-1~deb11u1106.0.5249.91-1106.0.5249.91-1~deb11u1107.0.5304.68-1107.0.5304.68-1~deb11u1107.0.5304.87-1107.0.5304.87-1~deb11u190.0.4430.212-193.0.4577.82-197.0.4692.71-0.197.0.4692.71-0.1~deb11u1
107.0.5304.110-1~deb11u1
chromium-browser
Ubuntu:18.04:LTS
 before 108.0.5359.71-0ubuntu0.18.04.5, plus listed versions
61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1
Show 45 moreShow less
63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.177.0.3865.90-0ubuntu0.18.04.178.0.3904.70-0ubuntu0.18.04.278.0.3904.97-0ubuntu0.18.04.178.0.3904.108-0ubuntu0.18.04.179.0.3945.79-0ubuntu0.18.04.179.0.3945.130-0ubuntu0.18.04.180.0.3987.87-0ubuntu0.18.04.180.0.3987.149-0ubuntu0.18.04.180.0.3987.163-0ubuntu0.18.04.181.0.4044.122-0ubuntu0.18.04.181.0.4044.138-0ubuntu0.18.04.183.0.4103.61-0ubuntu0.18.04.184.0.4147.105-0ubuntu0.18.04.185.0.4183.83-0ubuntu0.18.04.285.0.4183.121-0ubuntu0.18.04.186.0.4240.75-0ubuntu0.18.04.186.0.4240.198-0ubuntu0.18.04.187.0.4280.66-0ubuntu0.18.04.189.0.4389.82-0ubuntu0.18.04.1
108.0.5359.71-0ubuntu0.18.04.5
chromium
SUSE:Package Hub 15 SP3
From an advisory covering 6 CVEs
 before 107.0.5304.110-bp154.2.43.1
107.0.5304.110-bp154.2.43.1
chromium
SUSE:Package Hub 15 SP4
From an advisory covering 6 CVEs
 before 107.0.5304.110-bp154.2.43.1
107.0.5304.110-bp154.2.43.1
chromium
openSUSE:Leap 15.3
From an advisory covering 6 CVEs
 before 107.0.5304.110-bp154.2.43.1
107.0.5304.110-bp154.2.43.1
chromium
openSUSE:Leap 15.4
From an advisory covering 6 CVEs
 before 107.0.5304.110-bp154.2.43.1
107.0.5304.110-bp154.2.43.1
opera
openSUSE:Leap 15.4 NonFree
From an advisory covering 5 CVEs
 before 93.0.4585.37-lp154.2.32.1
93.0.4585.37-lp154.2.32.1
opera
openSUSE:Leap 15.5 NonFree
From an advisory covering 89 CVEs
 before 99.0.4788.13-lp155.3.6.1
99.0.4788.13-lp155.3.6.1
chromium
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 107.0.5304.110-1.1
107.0.5304.110-1.1
chromium
openSUSE:Tumbleweed
From an advisory covering 2310 CVEs
 before 113.0.5672.92-1.1
113.0.5672.92-1.1

History

History
RecordedChangedSources
affected, factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-3886 is a high vulnerability (CVSS 8.8) in Google Chrome, published November 9, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.91%, the 60th percentile. Fixed in chromium 107.0.5304.110-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 34 versions and 2,128 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open