CVE-2022-4262: Patching Zero-Day Vulnerability in Google Chrome Under Active Exploitation using Saner CVEM

Product version:6.5.0.0

Overview

Google has patched a zero-day vulnerability in Google Chrome, tracked as CVE-2022-4262.

• The issue is a high-severity type confusion weakness in the Chrome V8 JavaScript engine, reported by Clément Lecigne of Google's Threat Analysis Group.

• The vulnerability has been exploited in the wild since early 2022.

• Successful exploitation can:

  • Cause browser crashes by reading or writing memory out of bounds.

  • Allow arbitrary code execution, enabling attackers to run malicious code on the victim’s system.

This makes CVE-2022-4262 a critical security risk, requiring urgent patching.

CVE Assigned

• CVE-2022-4262

Affected Software

• Google Chrome versions before 108.0.5359.94 on:

  • Windows

  • Linux

  • macOS

Solution

Google has released security patches to fix this issue. We strongly recommend updating Chrome to version 108.0.5359.94 or later immediately.

Vulnerability Detection and Patching with Saner CVEM

Follow these steps to detect and remediate this vulnerability using Saner CVEM:

1. Login to the Saner CVEM platform.

2. Switch to the Account/Site-specific view and go to the VM tool.

3. If your Chrome installation is vulnerable, Saner CVEM will list CVE-2022-4262 under Top Vulnerabilities or Recently Discovered Vulnerabilities.
   

4. Search for CVE-2022-4262 in the VM tool.

5. If affected, apply the patch through:

   • PM → Missing Patches

6. Select the relevant Groups/Devices in the Asset Source section and click Apply.

7. In the Asset section, choose the Google Chrome product.
   

8. Click Apply Selected Patches (top-right corner).

   • This will prompt a Create Patching Task window.

   • Enter the Task Name and set the Remediation Schedule as per your preference.
     

   • Confirm by clicking Apply Selected Patches.

9. A Remediation Job will be created, upgrading Chrome to a safe version and fixing the vulnerability.
   
   

10. After remediation, the Saner agent automatically scans again and uploads the updated results to Saner CVEM.

Conclusion

CVE-2022-4262 is an actively exploited zero-day vulnerability in Google Chrome.
To ensure protection:

• Update Chrome immediately to the patched version.

• Use Saner CVEM for continuous vulnerability detection, patch deployment, and compliance tracking.