CVE-2022-4135
Exploited in the Wild
✓ Confirmed 0-Day
★ Google Project Zero
Triaged: March 5, 2026
5 articles
EPSS Score
Source: FIRST.org · 2026-05-24
0.08%
probability
This CVE has a 0.08% probability
of being exploited in the next 30 days.
0%
Top 23.2th percentile of all CVEs
100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE.
View on VulnerabilityLookup ↗
Description
Project ZeroHeap buffer overflow in GPU
Attack Intelligence
Google Project Zero
Discovered
Nov. 22, 2022
Patched
Nov. 24, 2022
Reported by
Clement Lecigne of Google's Threat Analysis Group
Root Cause Analysis
https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-4135.html
Google Rolls Out New Chrome Browser Update to Patch Yet Another Zero-Day Vulnerability
TheHackerNews
Google Chrome emergency update fixes 9th zero-day of the year
BleepingComputer
Dec 02, 2022
Google pushes emergency Chrome update to fix 8th zero-day in 2022
BleepingComputer
Nov 25, 2022
Google finds more Android, iOS zero-days used to install spyware
BleepingComputer
Mar 29, 2023
Signal Intelligence
Confidence
95%
EPSS
0.08%
Mentions
5
Last Seen
Mar 29, 2023
CNA Information
Analyst Note
Auto-imported from Google Project Zero — confirmed zero-day by definition.
Triage Info
Decided atMar 05, 2026