Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-1858 State: PUBLISHED Published: 2022-07-27T21:16:50 Last Updated: 2024-08-03T00:17:00.969Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Out of bounds read in DevTools in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform an out of bounds memory read via specific user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1314310 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1859 State: PUBLISHED Published: 2022-07-27T21:17:05 Last Updated: 2024-08-03T00:17:00.927Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1322744 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1860 State: PUBLISHED Published: 2022-07-27T21:17:17 Last Updated: 2024-08-03T00:17:00.867Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in UI Foundations in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific user interactions. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1297209 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1861 State: PUBLISHED Published: 2022-07-27T21:17:30 Last Updated: 2024-08-03T00:17:00.939Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Sharing in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to enage in specific user interactions to potentially exploit heap corruption via specific user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1316846 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1862 State: PUBLISHED Published: 2022-07-27T21:17:37 Last Updated: 2024-08-03T00:17:00.924Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Extensions in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass profile restrictions via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1236325 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1863 State: PUBLISHED Published: 2022-07-27T21:17:53 Last Updated: 2024-08-03T00:17:00.932Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Tab Groups in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1292870 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1864 State: PUBLISHED Published: 2022-07-27T21:18:07 Last Updated: 2024-08-03T00:17:00.872Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebApp Installs in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1320624 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1865 State: PUBLISHED Published: 2022-07-27T21:18:20 Last Updated: 2024-08-03T00:17:00.877Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1289192 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1866 State: PUBLISHED Published: 2022-07-27T21:18:36 Last Updated: 2024-08-03T00:17:00.937Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Tablet Mode in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific user interactions. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1292264 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1867 State: PUBLISHED Published: 2022-07-27T21:18:49 Last Updated: 2024-08-03T00:17:00.903Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in Data Transfer in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to bypass same origin policy via a crafted clipboard content. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1315563 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1868 State: PUBLISHED Published: 2022-07-27T21:19:02 Last Updated: 2024-08-03T00:17:00.885Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1301203 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1869 State: PUBLISHED Published: 2022-07-27T21:19:15 Last Updated: 2024-08-03T00:17:00.983Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type Confusion in V8 in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1309467 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1870 State: PUBLISHED Published: 2022-07-27T21:19:28 Last Updated: 2024-08-03T00:17:00.921Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in App Service in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1323236 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1871 State: PUBLISHED Published: 2022-07-27T21:19:40 Last Updated: 2024-08-03T00:17:00.854Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass file system policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1308199 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1872 State: PUBLISHED Published: 2022-07-27T21:19:53 Last Updated: 2024-08-03T00:17:00.928Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1310461 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1873 State: PUBLISHED Published: 2022-07-27T21:20:06 Last Updated: 2024-08-03T00:17:00.957Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in COOP in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1305394 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1874 State: PUBLISHED Published: 2022-07-27T21:20:20 Last Updated: 2024-08-03T00:17:00.919Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Safe Browsing in Google Chrome on Mac prior to 102.0.5005.61 allowed a remote attacker to bypass downloads protection policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1251588 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1875 State: PUBLISHED Published: 2022-07-27T21:20:33 Last Updated: 2024-08-03T00:17:00.945Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in PDF in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1306443 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1876 State: PUBLISHED Published: 2022-07-27T21:20:46 Last Updated: 2024-08-03T00:17:00.890Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in DevTools in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html - https://crbug.com/1313600 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1881 State: PUBLISHED Published: 2022-07-15T07:40:10 Last Updated: 2024-08-03T00:17:00.929Z Vendors: Octopus Deploy Products: Octopus Server Problem Types: Insecure Direct Object Reference (IDOR) Description: In affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists where it is possible for a user to download Project Exports from a Project they do not have permissions to access. This vulnerability only impacts projects within the same Space. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.octopus.com/post/2022/sa2022-06/
CVE ID: CVE-2022-1882 State: PUBLISHED Published: 2022-05-26T00:00:00 Last Updated: 2024-08-03T00:17:00.907Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is already called. This flaw allows a local user to crash or potentially escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/lkml/20220507115605.96775-1-tcs.kernel%40gmail.com/T/ - https://bugzilla.redhat.com/show_bug.cgi?id=2089701 - https://security.netapp.com/advisor
-1-tcs.kernel%40gmail.com/T/ - https://bugzilla.redhat.com/show_bug.cgi?id=2089701 - https://security.netapp.com/advisory/ntap-20220715-0002/
CVE ID: CVE-2022-1883 State: PUBLISHED Published: 2022-05-25T08:20:11 Last Updated: 2024-08-03T00:17:00.965Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: camptocamp Products: camptocamp/terraboard Problem Types: CWE-89 Description: SQL Injection in GitHub repository camptocamp/terraboard prior to 2.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a25d15bd-cd23-487e-85cd-587960f1b9e7 - https://github.com/camptocamp/terraboard/commit/2a5dbaac015dc0714b41a59995e24f5767f89ddc
CVE ID: CVE-2022-1884 State: PUBLISHED Published: 2024-11-15T10:53:00.844Z Last Updated: 2024-11-15T19:15:02.353Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: gogs Products: gogs/gogs Problem Types: CWE-78 Description: A remote command execution vulnerability exists in gogs/gogs versions <=0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the `tree_path` parameter during file uploads. An attacker can set `tree_path=.git.` to upload a file into the .git directory, allowing them to write or rewrite the `.git/config` file. If the `core.sshCommand` is set, this can lead to remote command execution. Additional An
ewrite the `.git/config` file. If the `core.sshCommand` is set, this can lead to remote command execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/9cd4e7b7-0979-4e5e-9a1c-388b58dea76b
CVE ID: CVE-2022-1885 State: PUBLISHED Published: 2022-06-27T08:58:14 Last Updated: 2024-08-03T00:17:00.942Z Vendors: Unknown Products: Cimy Header Image Rotator Problem Types: CWE-352 Description: The Cimy Header Image Rotator WordPress plugin through 6.1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/8416cbcf-086d-42ff-b2a4-f3954c8ff0c8
CVE ID: CVE-2022-1886 State: PUBLISHED Published: 2022-05-26T00:00:00 Last Updated: 2024-08-03T00:17:00.984Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/fa0ad526-b608-45b3-9ebc-f2b607834d6a - https://github.com/vim/vim/commit/2a585c85013be22f59f184d49612074fd9b115d7 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/ - https://security.gentoo.org/glsa/202208-32
nnounce%40lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/ - https://security.gentoo.org/glsa/202208-32 - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-1887 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:14:33.764Z Vendors: Mozilla Products: Firefox for iOS Problem Types: SQL injection in history tab Description: The search term could have been specified externally to trigger SQL injection. This vulnerability affects Firefox for iOS < 101. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-23/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1767205
CVE ID: CVE-2022-1888 State: PUBLISHED Published: 2022-08-31T15:32:57.691Z Last Updated: 2025-04-16T17:49:44.370Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Fuji Electric Products: Alpha7 PC Loader Problem Types: CWE-121 Description: Alpha7 PC Loader (All versions) is vulnerable to a stack-based buffer overflow while processing a specifically crafted project file, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-151-01
CVE ID: CVE-2022-1889 State: PUBLISHED Published: 2022-06-20T10:26:13 Last Updated: 2024-08-03T00:17:00.922Z Vendors: Unknown Products: Newsletter – Send awesome emails from WordPress Problem Types: CWE-79 Description: The Newsletter WordPress plugin before 7.4.6 does not escape and sanitise the preheader_text setting, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfilteredhtml is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/ee3832e2-ce40-4063-a23e-44c7f7f5f46a
CVE ID: CVE-2022-1890 State: PUBLISHED Published: 2023-01-23T15:18:46.294Z Last Updated: 2025-04-01T19:51:58.455Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: BIOS Problem Types: CWE-122 Description: A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-91369
CVE ID: CVE-2022-1891 State: PUBLISHED Published: 2023-01-23T15:25:33.599Z Last Updated: 2025-04-03T16:54:57.859Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: BIOS Problem Types: CWE-122 Description: A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-91369
CVE ID: CVE-2022-1892 State: PUBLISHED Published: 2023-01-23T15:31:19.243Z Last Updated: 2025-04-02T14:37:24.386Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: BIOS Problem Types: CWE-122 Description: A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-91369
CVE ID: CVE-2022-1893 State: PUBLISHED Published: 2022-05-31T21:50:10 Last Updated: 2024-08-03T00:17:00.932Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: polonel Products: polonel/trudesk Problem Types: CWE-212 Description: Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository polonel/trudesk prior to 1.2.3. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a1cfe61b-5248-4a73-9a80-0b764edc9b26 - https://github.com/polonel/trudesk/commit/ae904d37eaa38bffebfbfe8e949c0385c63e3263
CVE ID: CVE-2022-1894 State: PUBLISHED Published: 2022-07-11T12:56:21 Last Updated: 2024-08-03T00:17:00.933Z Vendors: Unknown Products: Popup Builder – Create highly converting, mobile friendly marketing popups. Problem Types: CWE-79 Description: The Popup Builder WordPress plugin before 4.1.11 does not escape and sanitize some settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltred_html is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/68af14ef-ca66-40d6-a1e5-09f74e2cd971
CVE ID: CVE-2022-1895 State: PUBLISHED Published: 2022-06-20T10:26:14 Last Updated: 2024-08-03T00:17:00.918Z Vendors: Unknown Products: underConstruction Problem Types: CWE-352 Description: The underConstruction WordPress plugin before 1.20 does not have CSRF check in place when deactivating the construction mode, which could allow attackers to make a logged in admin perform such action via a CSRF attack Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/bd9ef7e0-ebbb-4b91-8c58-265218a3c536
CVE ID: CVE-2022-1896 State: PUBLISHED Published: 2022-06-20T10:26:16 Last Updated: 2024-08-03T00:17:00.962Z Vendors: Unknown Products: underConstruction Problem Types: CWE-79 Description: The underConstruction WordPress plugin before 1.21 does not sanitise or escape the "Display a custom page using your own HTML" setting before outputting it, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiletred_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3e8bd875-2435-4a15-8ee8-8a00882b499c
CVE ID: CVE-2022-1897 State: PUBLISHED Published: 2022-05-27T00:00:00.000Z Last Updated: 2025-11-03T20:34:38.839Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-787 Description: Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/82c12151-c283-40cf-aa05-2e39efa89118 - https://github.com/vim/vim/commit/338f1fc0ee3ca929387448fe464579d6113fa76a - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/ - https://lists.fedoraproject.org/archives/lis
ounce%40lists.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OZSLFIKFYU5Y2KM5EJKQNYHWRUBDQ4GJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/ - https://security.gentoo.org/glsa/202208-32 - https://support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-1898 State: PUBLISHED Published: 2022-05-27T00:00:00 Last Updated: 2024-08-03T00:17:00.923Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-416 Description: Use After Free in GitHub repository vim/vim prior to 8.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/45aad635-c2f1-47ca-a4f9-db5b25979cea - https://github.com/vim/vim/commit/e2fa213cf571041dbd04ab0329303ffdc980678a - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/ - https://lists.fedoraproject.org/archives/list/package-