CVE-2022-0609
Exploited in the Wild
✓ Confirmed 0-Day
★ Google Project Zero
Triaged: March 5, 2026
17 articles
EPSS Score
Source: FIRST.org · 2026-05-24
49.0%
probability
This CVE has a 49.0% probability
of being exploited in the next 30 days.
0%
Top 97.8th percentile of all CVEs
100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE.
View on VulnerabilityLookup ↗
Description
Project ZeroUse-after-free in Animation
Attack Intelligence
CWE-118
· Incorrect Access of Indexable Resource ('Range Error')
CWE-119
· Buffer Overflow
CWE-416
· Use After Free
CWE-664
· Improper Control of a Resource Through its Lifetime
CWE-666
· Operation on Resource in Wrong Phase of Lifetime
CWE-672
· Operation on a Resource after Expiration or Release
CWE-825
· Expired Pointer Dereference
Google Project Zero
Discovered
Feb. 10, 2022
Patched
Feb. 15, 2022
Reported by
Adam Weidemann and Clément Lecigne of Google's Threat Analysis Group
Root Cause Analysis
???
Emergency Google Chrome update fixes zero-day used in attacks
BleepingComputer
Mar 25, 2022
Google Chrome emergency update fixes new zero-day used in attacks
BleepingComputer
Sep 02, 2022
Google Rolls Out New Chrome Browser Update to Patch Yet Another Zero-Day Vulnerability
TheHackerNews
Google Chrome emergency update fixes 9th zero-day of the year
BleepingComputer
Dec 02, 2022
Google fixes fifth Chrome zero-day bug exploited this year
BleepingComputer
Aug 17, 2022
Google Chrome emergency update fixes zero-day used in attacks
BleepingComputer
Apr 14, 2022
Google Chrome emergency update fixes zero-day exploited in attacks
BleepingComputer
Feb 14, 2022
Defense Lessons From the Black Basta Ransomware Playbook
Qualys
Feb 25, 2025
Google pushes emergency Chrome update to fix 8th zero-day in 2022
BleepingComputer
Nov 25, 2022
Google patches new Chrome zero-day flaw exploited in attacks
BleepingComputer
Jul 04, 2022
Google fixes seventh Chrome zero-day exploited in attacks this year
BleepingComputer
Oct 28, 2022
Signal Intelligence
Confidence
95%
EPSS
49.0%
Mentions
17
Last Seen
Feb 25, 2025
CNA Information
Analyst Note
Auto-imported from Google Project Zero — confirmed zero-day by definition.
Threat Actors 11
Lazarus Group
apt_group
Information theft and espionage
🇰🇵 KP
Cobalt
apt_group
Financial crime
🇷🇺 RU
APT37
apt_group
Information theft and espionage
🇰🇵 KP
Kimsuky
apt_group
Information theft and espionage
🇰🇷 KR
Harvester
apt_group
Information theft and espionage
Unknown
Infy
apt_group
Information theft and espionage
🇮🇷 IR
Rocke
apt_group
🇨🇳 CN
Shadow Network
apt_group
Information theft and espionage
🇨🇳 CN
Mana Team
apt_group
🇨🇳 CN
Operation Shadow Force
apt_group
🇨🇳 CN
Operation Black Atlas
apt_group
Financial crime
Triage Info
Decided atMar 05, 2026