Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-3627 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-05-07T14:57:16.043Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: libtiff Products: libtiff Problem Types: Out-of-bounds read in libtiff Description: LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff
91. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/commit/236b7191f04c60d09ee836ae13b50f812c841047 - https://gitlab.com/libtiff/libtiff/-/issues/411 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3627.json - https://security.netapp.com/advisory/ntap-20230110-0001/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html - https://www.debian.org/security/2023/dsa-5333
CVE ID: CVE-2022-3628 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T14:16:10.907Z Vendors: n/a Products: Kernel Problem Types: CWE-119 Description: A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user connects to a malicious USB device. This can allow a local user to crash the system or escalate their privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c?id=6788ba8aed4e28e90f72d68a9d794e34eac17295
CVE ID: CVE-2022-3629 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-04-23T16:45:16.589Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-401 Description: A vulnerability was found in Linux Kernel. It has been declared as problematic. This vulnerability affects the function vsock_connect of the file net/vmw_vsock/af_vsock.c. The manipulation leads to memory leak. The complexity of an attack is rather high. The exploitation appears to be difficult. It is recommended to apply a patch to fix this issue. VDB-211930 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Prog
tch to fix this issue. VDB-211930 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.211930 - https://vuldb.com/?ctiid.211930 - https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=7e97cfed9929eaabc41829c395eb0d1350fccb9d
CVE ID: CVE-2022-3630 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-04-15T13:25:27.406Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-404 Description: A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects some unknown processing of the file fs/fscache/cookie.c of the component IPsec. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211931. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub
31. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=fb24771faf72a2fd62b3b6287af3c610c3ec9cf1 - https://vuldb.com/?id.211931
CVE ID: CVE-2022-3631 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T15:26:28.022Z Vendors: Unknown Products: OAuth Client by DigitialPixies Problem Types: CWE-79 Description: The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/13966b61-7e65-4493-8bd8-828d6d4441d5
CVE ID: CVE-2022-3632 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T19:13:08.516Z Vendors: Unknown Products: OAuth Client by DigitialPixies Problem Types: CWE-352 Description: The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not have CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4c1b0e5e-245a-4d1f-a561-e91af906e62d
CVE ID: CVE-2022-3633 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-04-23T16:45:07.843Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-401 Description: A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function j1939_session_destroy of the file net/can/j1939/transport.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211932. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.211932 - https://vuldb.com/?cti
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.211932 - https://vuldb.com/?ctiid.211932 - https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=8c21c54a53ab21842f5050fa090f26b03c0313d6
CVE ID: CVE-2022-3634 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-29T16:26:11.192Z Vendors: Unknown Products: Contact Form 7 Database Addon Problem Types: CWE-1236 Improper Neutralization of Formula Elements in a CSV File Description: The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV file, which could lead to CSV injection Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b5eeefb0-fb5e-4ca6-a6f0-67f4be4a2b10
CVE ID: CVE-2022-3635 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-04-15T13:25:17.535Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-119 Description: A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function tst_timer of the file drivers/atm/idt77252.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. VDB-211934 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:/
to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=3f4093e2bf4673f218c0bf17d8362337c400e77b - https://vuldb.com/?id.211934 - https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
CVE ID: CVE-2022-3636 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-04-15T13:25:07.505Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-119 Description: A vulnerability, which was classified as critical, was found in Linux Kernel. This affects the function __mtk_ppe_check_skb of the file drivers/net/ethernet/mediatek/mtk_ppe.c of the component Ethernet Handler. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211935. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ntifier of this vulnerability is VDB-211935. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/pabeni/net-next.git/commit/?id=17a5f6a78dc7b8db385de346092d7d9f9dc24df6 - https://vuldb.com/?id.211935 - https://www.debian.org/security/2023/dsa-5333
CVE ID: CVE-2022-3637 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-04-15T13:24:57.854Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-404 Description: A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_init of the file monitor/jlink.c of the component BlueZ. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211936. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub
36. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=1d6cfb8e625a944010956714c1802bc1e1fc6c4f - https://vuldb.com/?id.211936
CVE ID: CVE-2022-3638 State: REJECTED Published: N/A Last Updated: 2022-11-09T00:00:00 Description: No description available.
CVE ID: CVE-2022-3639 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-05-07T14:53:08.897Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Improper data handling on branch creation could have been used to trigger high CPU usage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab
age. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/366876 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3639.json
CVE ID: CVE-2022-3640 State: PUBLISHED Published: 2022-10-21T00:00:00 Last Updated: 2024-08-03T01:14:03.216Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-119 Description: A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2cap_conn_del of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211944. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/blue
4. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=42cf46dea905a80f6de218e837ba4d4cc33d6979 - https://vuldb.com/?id.211944 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OD7VWUT7YAU4CJ247IF44NGVOAODAJGC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGOIRR72OAFE53XZRUDZDP7INGLIC3E3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XG2UPX3MQ7RKRJEUMGEH2TLPKZJCBU5C/ - https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html - ht
.org/message/XG2UPX3MQ7RKRJEUMGEH2TLPKZJCBU5C/ - https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html - https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
CVE ID: CVE-2022-3641 State: PUBLISHED Published: 2022-12-07T14:35:18.529Z Last Updated: 2025-04-23T13:43:54.866Z Vendors: Devolutions Products: Remote Desktop Manager Problem Types: n/a Description: Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows an authenticated user to spoof a privileged account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2022-0010
CVE ID: CVE-2022-3642 State: REJECTED Published: N/A Last Updated: 2022-11-10T00:00:00 Description: No description available.
CVE ID: CVE-2022-3643 State: PUBLISHED Published: 2022-12-07T00:00:00 Last Updated: 2024-08-03T01:14:03.290Z Vendors: Linux Products: Linux Problem Types: unknown Description: Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it
is is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-423.txt - http://www.openwall.com/lists/oss-security/2022/12/07/2 - https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html - https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html - http://packetstormsecurity.com/file
msg00031.html - https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html - http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html
CVE ID: CVE-2022-3644 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T19:38:38.989Z Vendors: n/a Products: pulp_ansible Problem Types: CWE-256 Description: The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pulp/pulp_ansible/blob/main/pulp_ansible/app/models.py#L234
CVE ID: CVE-2022-3646 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-04-15T13:24:51.206Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function nilfs_attach_log_writer of the file fs/nilfs2/segment.c of the component BPF. The manipulation leads to memory leak. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211961 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA A
he identifier VDB-211961 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=d0d51a97063db4704a5ef6bc978dddab1636a306 - https://vuldb.com/?id.211961 - https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html - https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
CVE ID: CVE-2022-3647 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-04-15T13:24:41.800Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Redis Problem Types: CWE-404 Description: ** DISPUTED ** A vulnerability, which was classified as problematic, was found in Redis up to 6.2.7/7.0.5. Affected is the function sigsegvHandler of the file debug.c of the component Crash Report. The manipulation leads to denial of service. The complexity of an attack is rather high. The exploitability is told to be difficult. The real existence of this vulnerability is still doubted at the moment. Upgrading to version 6.2.8 and 7.0.6 is able to
The real existence of this vulnerability is still doubted at the moment. Upgrading to version 6.2.8 and 7.0.6 is able to address this issue. The patch is identified as 0bf90d944313919eb8e63d3588bf63a367f020a3. It is recommended to apply a patch to fix this issue. VDB-211962 is the identifier assigned to this vulnerability. NOTE: The vendor claims that this is not a DoS because it applies to the crash logging mechanism which is triggered after a crash has occurred. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.211962 - https://vuldb.com/?ctiid.211962 - https://github.com/redis/redis/commit/0bf90d944313919eb8e63d3588bf63a367f020
.211962 - https://vuldb.com/?ctiid.211962 - https://github.com/redis/redis/commit/0bf90d944313919eb8e63d3588bf63a367f020a3
CVE ID: CVE-2022-3649 State: PUBLISHED Published: 2022-10-21T00:00:00 Last Updated: 2024-08-03T01:14:03.289Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Linux Products: Kernel Problem Types: CWE-119 Description: A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_new_inode of the file fs/nilfs2/inode.c of the component BPF. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211992. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.
f this vulnerability is VDB-211992. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=d325dc6eb763c10f591c239550b8c7e5466a5d09 - https://vuldb.com/?id.211992 - https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html - https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html - https://security.netapp.com/advisory/ntap-20230214-0009/
CVE ID: CVE-2022-3650 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-11-03T18:08:01.727Z Vendors: n/a Products: Ceph Problem Types: CWE-842 Description: A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/oss-sec/2022/q4/41 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OEVVWT5ZFLYCVZNDJTDX7R6RY2W7JHP5/ - https://security.gentoo.org/glsa/202312-10
CVE ID: CVE-2022-3652 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-11-12T16:19:53.690Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html - https://crbug.com/1369871
CVE ID: CVE-2022-3653 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-11-12T16:19:06.480Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Vulkan in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html - https://crbug.com/1354271
CVE ID: CVE-2022-3654 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-11-12T16:18:29.328Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Layout in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html - https://crbug.com/1365330 - http://packetstormsecurity.com/files/170012/Chrome-blink-LocalFrameView-PerformLayout-Use-After-Free.html
CVE ID: CVE-2022-3655 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-11-12T16:14:35.603Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Media Galleries in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html - https://crbug.com/1343384
CVE ID: CVE-2022-3656 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-11-12T16:12:03.040Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html - https://crbug.com/1345275
CVE ID: CVE-2022-3657 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-11-12T16:10:17.291Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Extensions in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html - https://crbug.com/1351177
CVE ID: CVE-2022-3658 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-11-12T16:08:38.634Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Feedback service on Chrome OS in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html - https://crbug.com/1352817