CVE-2022-28287

What it actually does

Incorrect text selection caching under unusual circumstances triggers memory corruption resulting in application crash.

Why it matters to the business

Unreliable application behavior and denial of service for end users in environments running the affected software; low exploitability reduces immediate urgency but still requires patching.

How an attack unfolds

An attacker supplies specially crafted content that triggers edge-case text selection behavior; when a victim interacts with the content by selecting text the flawed caching logic corrupts memory and crashes the process.

How to fix it

Upgrade affected installations to a build containing commit 6863f73818c36b0b88c677ba533765c8074907b4 or later; apply vendor updates promptly given the availability of public exploit code.

How to confirm the fix worked

Confirm the installed version contains commit 6863f73818c36b0b88c677ba533765c8074907b4; re-test text selection operations that previously triggered crashes.

Typical attack path

1. Deliver malicious content via web page or document
2. Victim performs text selection on the crafted content
3. Flawed caching logic executes and crashes the application

How to detect it

Review application crash logs and telemetry for sudden terminations during text-selection operations; correlate with access to untrusted web content around the time of the crash.

What your security team should do

• Prioritize patching all instances of the affected software within standard change windows
• Monitor vendor advisories for any related downstream components
• Verify that crash-reporting telemetry is enabled to detect residual exposure