CVE-2022-3658: Google Chrome

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Use after free in Feedback service on Chrome OS in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: Medium)

Affected products

• Google Chrome: before 107.0.5304.62 (fixed in 107.0.5304.62)

Published 2022-11-01. Last modified 2026-06-17.