A new LTS Candidate, LTC- 102.0.5005.177 (Platform Version: 14695.128.0), is rolling out for most ChromeOS devices. Release notes for LTC-102 can be found here. Want to know more about Long-term Support? Click here.
This update includes the following Security fixes:
| 1327087 | High | CVE-2022-2296 | Use after free in Chrome OS Shell |
| 1343348 | High | CVE-2022-3039 | Use after free in WebSQL |
| 1329794 | High | CVE-2022-2998 | Use after free in Browser Creation |
| 1286203 | High | CVE-2022-2607 | Use after free in WebUI |
| 1330489 | High | CVE-2022-2606 | Use after free in Managed devices API |
| 1338553 | High | CVE-2022-3042 | Use after free in PhoneHub |
| 1338560 | High | CVE-2022-2609 | Use after free in NearbyShare |
| 1358134 | High | CVE-2022-3075 | Insufficient data validation in Mojo |
| 1346245 | High | CVE-2022-3046 | Use after free in Browser Tag |
| 1338135 | High | CVE-2022-2857 | Use after free in Blink |
| 1323449 | Medium | CVE-2022-2621 | Use after free in Extensions |
| 1345193 | Medium | CVE-2022-2860 | Insufficient policy enforcement in Cookies. |
| 1346236 | Medium | CVE-2022-2861 | Inappropriate implementation in Extensions API |
| 1341907 | Medium | CVE-2022-2614 | Use after free in Sign-In Flow |
| 1339745 | Medium | CVE-2022-2624 | Heap buffer overflow in PDF |
| 1321350 | Medium | CVE-2022-2612 | Side-channel information leakage in Keyboard input |
| 1268580 | Medium | CVE-2022-2615 | Insufficient policy enforcement in Cookies. |
| 1292451 | Medium | CVE-2022-2617 | Use after free in Extensions API |
| 1337304 | Medium | CVE-2022-2620 | Use after free in WebUI |
| 1338412 | Medium | CVE-2022-2859 | Use after free in Chrome OS Shell |
Giuliana Pritchard
Google Chrome OS
Vulmon