Vulnerability Intelligence

🛡 CVE-2022-3075

📈 EPSS exploit probability

⚠ KEV remediation overdue

CISA required federal remediation by 2022-09-29. This exploited vulnerability is past its Binding Operational Directive 22-01 due date — prioritize patch/mitigation and hunt for exploitation.

📄 Description

Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could a

🔗 External references & OSINT

🔄 Internal pivots & actions

🛡 Add to case

🗃 Data Management

🧩 Advanced Capabilities