CVE-2022-2294VulnerabilityPublished 08/25/2022Updated 10/24/2026
CVE-2022-2294: WebRTC Heap Buffer Overflow Vulnerability
Affects WebRTC WebRTCSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 08/25/2022
- KEV deadline
- 09/15/2022
- Ransomware
- Used in ransomware campaigns
- EPSS
- 70.8% chance of exploitation in 30 days – higher than 99% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome.