CVE-2022-1364

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero
Triaged: March 3, 2026 13 articles
VulnLookup ↗ NVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24
17.51%
probability
This CVE has a 17.51% probability of being exploited in the next 30 days.
0% Top 95.2th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero
Type confusion in V8

Attack Intelligence

Google Project Zero

Discovered
April 13, 2022
Patched
April 14, 2022
Reported by
Clément Lecigne of Google's Threat Analysis Group
Root Cause Analysis
https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-1364.html

Exploits & PoC

interruptlabs/uc_browser_poc_CVE-2022-1364

Proof of concept for CVE-2022-1364 against Alibaba's UC Browser

13
1 repo — triés par ⭐ Rechercher sur GitHub ↗

Signal Intelligence

Confidenceⓘ
82%
EPSS 17.51%
Mentions 13
Last Seen Apr 18, 2023

CNA Information

Analyst Note

CVE-2022-1364 is a confirmed high-severity type confusion vulnerability in Chrome's V8 engine affecting versions prior to 100.0.4896.127, with validation from Google Project Zero researchers. The CVSS score of 8.8 and official vendor documentation provide strong evidence of legitimacy, though absence from CISA KEV and limited public articles suggest it may not have been actively exploited at scale.

Triage Info

Decided atMar 03, 2026