References https://nvd.nist.gov/vuln/detail/CVE-2022-4135 https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2022/CVE-2022-4135.html https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_24.html https://crbug.com/1392715 https://www.sentinelone.com/vulnerability-database/cve-2022-4135/ https://github.com/advisories/GHSA-995f-9x5r-2rcj https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4135 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-4135 https://thehackernews.com/2022/11/update-chrome-browser-now-to-patch-new.html https://www.lookout.com/threat-intelligence/article/chromeheap-cve-2022-4135
Related VulnerabilitiesPoCgoogle-api-key: Google API KeyWP Google 地图 < 9.0.48 - 未经身份验证的存储 XSS (CVE-2025-11307)PoCCVE-2026-8732: WP Maps Pro (wp-google-map-gold) <= 6.1.0 - Unauthenticated Administrator Account CreationPoCCVE-2026-4810: Google ADK-Python - Unauthenticated Builder EndpointPoCgoogle-gemini-key-exposure: Google Gemini API Key - ExposurePoCCVE-2024-13220: WordPress Google Map Professional - Cross-Site ScriptingPoCfreshrss-api: FreshRSS Google Reader API ExposurePoCgcloudignore-file-exposure: Google Cloud Ignore File ExposurePoCgoogle-calendar-exposure: Google Calendar - ExposurePoCwp-duracelltomi-google-tag-manager-fpd: WordPress Plugin Google Tag Manager - Full Path DisclosurePoCwp-googlecaptcha-fpd: WordPress Plugin reCaptcha by BestWebSoft (google-captcha) - Full Path DisclosurePoCCVE-2025-12139: Integrate Google Drive <= 1.5.3 - Information DisclosurePoCgcs-bucket-listing: Google Cloud Storage - Public Bucket Listing