CVE-2022-3370
published 2022-11-01CVE-2022-3370: Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
PriorityP345high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.83%
53.9th percentile
Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chromium | chromium | >= 0 < 106.0.5249.91-1~deb11u1 | 106.0.5249.91-1~deb11u1 |
| chromium | chromium | >= 0 < 106.0.5249.91-1 | 106.0.5249.91-1 |
| chromium | chromium | >= 0 < 106.0.5249.91-1 | 106.0.5249.91-1 |
| chromium | chromium | >= 0 < 106.0.5249.91-1 | 106.0.5249.91-1 |
| debian | chromium | < chromium 106.0.5249.91-1 (bookworm) | chromium 106.0.5249.91-1 (bookworm) |
| chrome | < 106.0.5249.91 | 106.0.5249.91 | |
| chrome | >= unspecified < 106.0.5249.91 | 106.0.5249.91 | |
| chrome_chrome | — | — | |
| msrc | microsoft_edge | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH
vendor_debian8.8HIGH
vendor_msrc8.8HIGH
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Chrome up to 106.0.5249.62 Custom Elements use after free (EUVD-2022-42750)
vuldb·2026-07-13·CVSS 8.8
CVE-2022-3370 [HIGH] Google Chrome up to 106.0.5249.62 Custom Elements use after free (EUVD-2022-42750)
A vulnerability was found in Google Chrome. It has been declared as critical. This issue affects some unknown processing of the component Custom Elements. The manipulation results in use after free.
This vulnerability was named CVE-2022-3370. The attack may be performed from remote. There is no available exploit.
It is recommended to upgrade the affected component.
VulDB
Microsoft Edge Custom Elements use after free (EUVD-2022-42750)
vuldb·2026-07-13·CVSS 8.8
CVE-2022-3370 [HIGH] Microsoft Edge Custom Elements use after free (EUVD-2022-42750)
A vulnerability classified as critical has been found in Microsoft Edge. This impacts an unknown function of the component Custom Elements. The manipulation leads to use after free.
This vulnerability is documented as CVE-2022-3370. The attack can be initiated remotely. There is not any exploit available.
Applying a patch is the recommended action to fix this issue.
OSV
CVE-2022-3370: Use after free in Custom Elements in Google Chrome prior to 106
osv·2022-11-01·CVSS 8.8
CVE-2022-3370 [HIGH] CVE-2022-3370: Use after free in Custom Elements in Google Chrome prior to 106
Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
GHSA
GHSA-53rj-vpf5-jg7q: Use after free in Custom Elements in Google Chrome prior to 106
ghsa_unreviewed·2022-11-01
CVE-2022-3370 [HIGH] CWE-416 GHSA-53rj-vpf5-jg7q: Use after free in Custom Elements in Google Chrome prior to 106
Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Red Hat
kernel: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
vendor_redhat·2025-09-15·CVSS 5.5
CVE-2022-50334 [MEDIUM] CWE-476 kernel: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
kernel: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
In the Linux kernel, the following vulnerability has been resolved:
hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
Syzkaller reports a null-ptr-deref bug as follows:
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
RIP: 0010:hugetlbfs_parse_param+0x1dd/0x8e0 fs/hugetlbfs/inode.c:1380
[...]
Call Trace:
vfs_parse_fs_param fs/fs_context.c:148 [inline]
vfs_parse_fs_param+0x1f9/0x3c0 fs/fs_context.c:129
vfs_parse_fs_string+0xdb/0x170 fs/fs_context.c:191
generic_parse_monolithic+0x16f/0x1f0 fs/fs_context.c:231
do_new_mount fs/namespace.c:3036 [inline]
path_mount+0x12de/0x1e20 fs/namespace.c:3370
do_mount fs/namespace.c:3383 [inline]
__do_sys_mount fs/namespace.c:3591 [inline]
__se_sys_mount fs/name
Microsoft
Chromium: CVE-2022-3370 Use after free in Custom Elements
vendor_msrc·2022-10-11·CVSS 8.8
CVE-2022-3370 [HIGH] Chromium: CVE-2022-3370 Use after free in Custom Elements
Chromium: CVE-2022-3370 Use after free in Custom Elements
Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
FAQ: Why is this Chrome CVE included in the Security Update Guide?
The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.
How can I see the version of the browser?
In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
Click on Help and Feedback
Click on About Microsoft Edge
Chrome
Stable Channel Update for Desktop: CVE-2022-3370
vendor_chrome·2022-09-30·CVSS 8.8
CVE-2022-3370 [HIGH] Stable Channel Update for Desktop: CVE-2022-3370
Stable Channel Update for Desktop
CVE-2022-3370: Use after free in Custom Elements. Reported by Aviv A
Severity: high
Debian
CVE-2022-3370: chromium - Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowe...
vendor_debian·2022·CVSS 8.8
CVE-2022-3370 [HIGH] CVE-2022-3370: chromium - Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowe...
Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Scope: local
bookworm: resolved (fixed in 106.0.5249.91-1)
bullseye: resolved (fixed in 106.0.5249.91-1~deb11u1)
forky: resolved (fixed in 106.0.5249.91-1)
sid: resolved (fixed in 106.0.5249.91-1)
trixie: resolved (fixed in 106.0.5249.91-1)
No detection rules found.
No public exploits indexed.
Talos
Microsoft Patch Tuesday for October 2022 — Snort rules and prominent vulnerabilities
blogs_talos·2022-10-11·CVSS 8.1
CVE-2022-41038 [HIGH] Microsoft Patch Tuesday for October 2022 — Snort rules and prominent vulnerabilities
## Microsoft Patch Tuesday for October 2022 — Snort rules and prominent vulnerabilities
Microsoft released its monthly security update Tuesday, disclosing 83 vulnerabilities across the company’s hardware and software line, including seven critical issues in Windows’ point-to-point tunneling protocol.
October's security update features 11 critical vulnerabilities, with the remainder being “important.”
One of the most notable vulnerabilities Microsoft fixed this month is CVE-2022-41038 , a remote code execution issue in Microsoft SharePoint. There are several other SharePoint vulnerabilities included in this month’s Patch Tuesday, though this seems the most severe, as Microsoft continues it to be “more likely” to be exploited.
An attacker must be authenticated to the target site with the
Talos
Microsoft Patch Tuesday for October 2022 — Snort rules and prominent vulnerabilities
blogs_talos·2022-10-11·CVSS 8.1
CVE-2022-41038 [HIGH] Microsoft Patch Tuesday for October 2022 — Snort rules and prominent vulnerabilities
Microsoft released its monthly security update Tuesday, disclosing 83 vulnerabilities across the company’s hardware and software line, including seven critical issues in Windows’ point-to-point tunneling protocol.
October's security update features 11 critical vulnerabilities, with the remainder being “important.”
One of the most notable vulnerabilities Microsoft fixed this month is CVE-2022-41038, a remote code execution issue in Microsoft SharePoint. There are several other SharePoint vulnerabilities included in this month’s Patch Tuesday, though this seems the most severe, as Microsoft continues it to be “more likely” to be exploited.
An attacker must be authenticated to the target site with the correct permissions to use manage lists in SharePoint to exploit this vulnerability, and
Bugzilla
CVE-2022-50334 kernel: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
bugzilla·2025-09-15·CVSS 5.5
CVE-2022-50334 [MEDIUM] CVE-2022-50334 kernel: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
CVE-2022-50334 kernel: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
In the Linux kernel, the following vulnerability has been resolved:
hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
Syzkaller reports a null-ptr-deref bug as follows:
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
RIP: 0010:hugetlbfs_parse_param+0x1dd/0x8e0 fs/hugetlbfs/inode.c:1380
[...]
Call Trace:
vfs_parse_fs_param fs/fs_context.c:148 [inline]
vfs_parse_fs_param+0x1f9/0x3c0 fs/fs_context.c:129
vfs_parse_fs_string+0xdb/0x170 fs/fs_context.c:191
generic_parse_monolithic+0x16f/0x1f0 fs/fs_context.c:231
do_new_mount fs/namespace.c:3036 [inline]
path_mount+0x12de/0x1e20 fs/namespace.c:3370
do_mount fs/namespace.c:3383 [inline]
__do_sys_mount fs/namespace.c:3591 [inline]
__se_
2022-11-01
Published