CVE-2022-3038
Google Chromium Network Service Use-After-Free Vulnerability
Published Sep 26, 2022 · updated Jun 16, 2026 · google chrome
Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Timeline
Detection, updates, and resolution for this record.
Sep 26, 2022 · Catalog
Detected
Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Mar 30, 2023 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Apr 20, 2023 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Required action
Apply updates per vendor instructions.
CISA due date Apr 20, 2023
Affected
- cpe fedoraproject/fedora37
- cpe google/chromeversion unspecified
- vendor Google Chromium Network Serviceversion unspecified
Sources
- CISA KEVCVE-2022-3038
Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
cisa.gov - CVE.orgCVE-2022-3038
Official CVE identifier
cve.org - FIRST EPSSCVE-2022-3038
30-day exploitation probability 24.9%
first.org - NIST NVDCVE-2022-3038
Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
nvd.nist.gov