CVE-2022-3075
Google Chromium Mojo
Google Chromium Mojo Insufficient Data Validation Vulnerability
What it is
Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
What to do
Apply updates per vendor instructions.
Vendor notices and references
- chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop.html, https://msrc
- nvd.nist.gov/vuln/detail/CVE-2022-3075
Description and required action as published by CISA. Full record at NVD.
Other Google entries on the list
- Chromium Google Chromium Use-After-Free Vulnerability CVE-2026-125350 · Nov 10, 2026
- Brotli Google Brotli Unchecked Return Value Vulnerability CVE-2026-111497 · Oct 27, 2026
- Pixel Google Pixel Improper Authorization Vulnerability CVE-2026-58704 · Sep 16, 2026
- Chromium V8 Google Chromium V8 Out of Bounds Write Vulnerability CVE-2026-87491 · Sep 9, 2026
- Chromium V8 Google Chromium V8 Type Confusion Vulnerability CVE-2026-85046 · Sep 4, 2026
- Chromium V8 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability CVE-2026-11645 · Jun 9, 2026