CVE-2022-1096: Google Chromium V8 Type Confusion Vulnerability

High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-03-28. EPSS: 24.7% chance of exploitation in the next 30 days.

Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products

• Google Chrome: before 99.0.4844.84 (fixed in 99.0.4844.84)

Published 2022-07-23. Last modified 2026-06-17.