{"id":"CVE-2022-2294","kind":"vulnerability","aliases":["CVE-2022-2294"],"related":[],"title":"Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially…","description":"WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome.\n\nCISA required action: Apply updates per vendor instructions.","summary":"WebRTC, the real-time communication library built into web browsers, has a heap buffer overflow that lets an attacker run shellcode. It affects browsers that use WebRTC, including Google Chrome, and CISA lists it as actively exploited in the wild.","severity":"high","cvss":8.8,"epss":0.70833,"exploited":true,"exploited_at":"2022-08-25T00:00:00+00:00","products":[{"name":"WebRTC WebRTC","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"google chrome","fixed":["103.0.5060.114"],"affected":"< 103.0.5060.114","ecosystem":"vendor"},{"name":"fedoraproject extra packages for enterprise linux","fixed":[],"affected":"= 8.0","ecosystem":"vendor"},{"name":"fedoraproject fedora","fixed":[],"affected":"= 35","ecosystem":"vendor"},{"name":"fedoraproject fedora","fixed":[],"affected":"= 36","ecosystem":"vendor"},{"name":"webkitgtk","fixed":["2.36.5"],"affected":"< 2.36.5","ecosystem":"vendor"},{"name":"wpewebkit wpe webkit","fixed":["2.36.5"],"affected":"< 2.36.5","ecosystem":"vendor"},{"name":"apple ipados","fixed":["15.6"],"affected":"< 15.6","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["15.6"],"affected":"< 15.6","ecosystem":"vendor"},{"name":"apple mac os x","fixed":["10.15.7"],"affected":"< 10.15.7","ecosystem":"vendor"},{"name":"apple mac os x","fixed":[],"affected":"= 10.15.7","ecosystem":"vendor"},{"name":"apple macos","fixed":["11.6.8"],"affected":"< 11.6.8","ecosystem":"vendor"},{"name":"apple macos","fixed":["12.5"],"affected":">= 12.0, < 12.5","ecosystem":"vendor"},{"name":"apple tvos","fixed":["15.6"],"affected":"< 15.6","ecosystem":"vendor"},{"name":"apple watchos","fixed":["8.7"],"affected":"< 8.7","ecosystem":"vendor"},{"name":"webrtc project webrtc","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["browsers","chrome","exploited","ransomware","runtime","webrtc"],"not_affected_if":["patched-browser"],"how_to_check":null,"fix":"Update affected browsers (for example Google Chrome) to the vendor's patched release, as CISA directs. Exact patched versions are unknown from the sources.","status":"open","published_at":"2022-07-28T02:15:07+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:10:47+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"runtime","confidence":0.7,"triage":{"at":"2026-10-23T21:10:47Z","model":"claude-haiku-5-5","output":{"fix":"Update affected browsers (for example Google Chrome) to the vendor's patched release, as CISA directs. Exact patched versions are unknown from the sources.","reach":"internet","impact":"high","summary":"WebRTC, the real-time communication library built into web browsers, has a heap buffer overflow that lets an attacker run shellcode. It affects browsers that use WebRTC, including Google Chrome, and CISA lists it as actively exploited in the wild.","category":"runtime","who_cares":["chrome","browsers","webrtc"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker runs shellcode in the victim's browser process","analyst_note":"Confirm patched browser versions from the Chrome release notes for CVE-2022-2294 and whether ransomware use is documented; check the KEV entry at cisa.gov.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["patched-browser"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000471,"input_tokens":2876,"output_tokens":366,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2022':19A,22A '-2294':20A,23A '103.0.5060.114':11A 'action':157C 'activ':108B 'affect':95B 'allow':12A,134C 'apple':42A,44A,47A,51A,55A,57A,59A,61A 'appli':158C 'attack':15A,91B,136C 'browser':66B,82B,96B,121C,145C 'buffer':2A,86B,130C 'built':79B 'chrome':8A,27A,67B,102B,154C 'cisa':104B,155C 'communic':77B,126C 'contain':127C 'cve':18A,21A 'enterprise':32A 'execut':140C 'exploit':68B,109B 'extra':29A 'fedora':35A,37A 'fedoraproject':28A,34A,36A 'for':31A 'googl':7A,101B,153C 'google':26A 'heap':1A,85B,129C 'impact':143C 'includ':100B,148C 'instruct':162C 'ipados':43A 'iphone':45A 'let':89B 'librari':78B 'limit':151C 'linux':33A 'list':105B 'mac':48A,52A 'macos':56A,58A 'open':116C 'open-sourc':115C 'os':46A,49A,53A 'overflow':3A,87B,131C 'packages':30A 'per':160C 'perform':138C 'potenti':17A 'prior':9A 'project':64A,118C 'provid':119C 'ransomwar':69B 'real':75B,124C 'real-tim':74B,123C 'remot':14A 'requir':156C 'run':92B 'runtim':70B 'shellcod':93B,139C 'sourc':117C 'time':76B,125C 'tvos':60A 'updat':159C 'use':98B,146C 'vendor':161C 'vulner':132C,142C 'watchos':62A 'web':81B,120C,144C 'webkit':41A 'webkitgtk':38A 'webrtc':5A,24A,25A,63A,65A,71B,72B,99B,113C,147C 'wild':112B 'wpe':40A 'wpewebkit':39A 'x':50A,54A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2022-07-28T02:15:07+00:00","kev":{"dateAdded":"2022-08-25","dueDate":"2022-09-15","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Known"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2022-2294","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2294","severity":null,"published_at":"2022-08-25T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T11:39:16+00:00","note":null},{"source":"epss","external_id":"CVE-2022-2294","url":"https://api.first.org/data/v1/epss?cve=CVE-2022-2294","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2022-2294","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2294","severity":null,"published_at":"2022-07-28T02:15:07+00:00","modified_at":"2026-08-04T05:16:28+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}