CRITICALCVSS v3.1 9.6Actively exploited · CISA KEV since 2022-09-08Vulnerability
CVE-2022-3075
Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Properties
- Vulnerability name
- Google Chromium Mojo Insufficient Data Validation Vulnerability
- Epss score
- 0.05846
- Last seen
- 2026-10-19T12:00:27+00:00
- Due date
- 2022-09-29
- Exploited euvd since
- 2022-09-08T00:00:00+00:00
- Source url
- https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
- Date added
- 2022-09-08
- Score
- 9.6
- Euvd base score version
- 3.1
- Euvd vendor
- In Signal since
- initial import (Sep 2026)
- Euvd base score
- 9.6
- Vendor project
- Content hash
- c5dcab8d3ae0d714ed51ab770138a88d8ee0c8fe646c34bae83677cf51f77580
- Published at
- 2022-09-26T16:15:13.463
- Euvd updated
- 2025-10-21T23:15:34+00:00
- Last modified
- 2026-06-17T04:58:46.630
- Euvd epss pct
- 5.85
- Epss percentile
- 0.9311
- Licence
- FIRST EPSS: free to use; attribution requested in publications or products (FAQ)
Related Entities (5)
AFFECTS_PRODUCT (2)
DESCRIBES (1)
HAS_WEAKNESS (1)
INVOLVES (1)
Explore deeper with Ninja Signal's threat intelligence graph