Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-0428 State: PUBLISHED Published: 2022-05-02T16:05:37 Last Updated: 2024-08-02T23:25:40.653Z Vendors: Unknown Products: Content Egg Problem Types: CWE-79 Description: The Content Egg WordPress plugin before 5.3.0 does not sanitise and escape the page parameter before outputting back in an attribute in the Autoblogging admin dashboard, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/071a2f69-9cd6-42a8-a56c-264a589784ab
CVE ID: CVE-2022-0429 State: PUBLISHED Published: 2022-03-07T08:16:37 Last Updated: 2024-08-02T23:25:40.446Z Vendors: Unknown Products: WP Cerber Security, Anti-spam & Malware Scan Problem Types: CWE-79 Description: The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable before using it in an attribute in the Activity tab in the plugins dashboard, leading to an unauthenticated stored Cross-Site Scripting vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d1b6f438-f737-4b18-89cf-161238a7421b
CVE ID: CVE-2022-0430 State: PUBLISHED Published: 2022-03-15T14:20:16 Last Updated: 2024-08-02T23:25:40.480Z Severity: LOW (CVSS 2.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: httpie Products: httpie/httpie Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/httpie/httpie/commit/65ab7d5caaaf2f95e61f9dd65441801c2ddee38b - https://huntr.dev/bounties/dafb2e4f-c6b6-4768-8ef5-b396cd6a801f
CVE ID: CVE-2022-0431 State: PUBLISHED Published: 2022-04-04T15:35:44 Last Updated: 2024-08-02T23:25:40.428Z Vendors: Unknown Products: Insights from Google PageSpeed Problem Types: CWE-79 Description: The Insights from Google PageSpeed WordPress plugin before 4.0.4 does not sanitise and escape various parameters before outputting them back in attributes in the plugin's settings dashboard, leading to Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/52bd94df-8816-48fd-8788-38d045eb57ca - https://plugins.trac.wordpress.org/changeset/2690415
CVE ID: CVE-2022-0432 State: PUBLISHED Published: 2022-02-02T20:11:08 Last Updated: 2024-08-02T23:25:40.426Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N) Vendors: mastodon Products: mastodon/mastodon Problem Types: CWE-1321 Description: Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/d06da292-7716-4d74-a129-dd04773398d7 - https://github.com/mastodon/mastodon/commit/4d6d4b43c6186a13e67b92eaf70fe1b70ea24a09
CVE ID: CVE-2022-0433 State: PUBLISHED Published: 2022-03-09T16:32:52 Last Updated: 2024-08-02T23:25:40.560Z Vendors: n/a Products: kernel Problem Types: CWE-908 Description: A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2048259 - https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git/commit/?id=3ccdcee28415c4226de05438b4d89eb5514edf73 - https://lore.k
el.org/pub/scm/linux/kernel/git/netdev/net-next.git/commit/?id=3ccdcee28415c4226de05438b4d89eb5514edf73 - https://lore.kernel.org/bpf/1640776802-22421-1-git-send-email-tcs.kernel%40gmail.com/t/
CVE ID: CVE-2022-0434 State: PUBLISHED Published: 2022-03-07T08:16:39 Last Updated: 2024-08-02T23:25:40.624Z Vendors: Unknown Products: Page View Count Problem Types: CWE-89 Description: The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the post_ids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users. As a result, unauthenticated attackers could perform SQL injection attacks Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/be895016-7365-4ce4-a54f-f36d0ef2d6f1
CVE ID: CVE-2022-0435 State: PUBLISHED Published: 2022-03-25T00:00:00 Last Updated: 2024-08-02T23:25:40.398Z Vendors: n/a Products: kernel Problem Types: CWE-787 Description: A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2048738 - https://www.openwall.com/lists/oss-security/2022/02/10/1 - https://
ttps://bugzilla.redhat.com/show_bug.cgi?id=2048738 - https://www.openwall.com/lists/oss-security/2022/02/10/1 - https://security.netapp.com/advisory/ntap-20220602-0001/
CVE ID: CVE-2022-0436 State: PUBLISHED Published: 2022-04-12T00:00:00 Last Updated: 2024-08-02T23:25:40.632Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: gruntjs Products: gruntjs/grunt Problem Types: CWE-22 Description: Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/f55315e9-9f6d-4dbb-8c40-bae50c1ae92b - https://github.com/gruntjs/grunt/commit/aad3d4521c3098fb255fb2db8f2e1d691a033665 - https://lists.debian.org/debian-lts-announce/2023/04/msg00008.html
CVE ID: CVE-2022-0437 State: PUBLISHED Published: 2022-02-05T01:50:10 Last Updated: 2024-08-02T23:25:40.412Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: karma-runner Products: karma-runner/karma Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/64b67ea1-5487-4382-a5f6-e8a95f798885 - https://github.com/karma-runner/karma/commit/839578c45a8ac42fbc1d72105f97eab77dd3eb8a
CVE ID: CVE-2022-0439 State: PUBLISHED Published: 2022-03-07T08:16:41 Last Updated: 2024-08-02T23:25:40.376Z Vendors: Unknown Products: Email Subscribers & Newsletters Problem Types: CWE-89 SQL Injection, CWE-352 Cross-Site Request Forgery (CSRF) Description: The Email Subscribers & Newsletters WordPress plugin before 5.3.2 does not correctly escape the `order` and `orderby` parameters to the `ajax_fetch_report_list` action, making it vulnerable to blind SQL injection attacks by users with roles as low as Subscriber. Further, it does not have any CSRF protection in place for the action, allowing an attacker to trick any logged in user to perform the action by clicking a link. Additional Anal
r the action, allowing an attacker to trick any logged in user to perform the action by clicking a link. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/729d3e67-d081-4a4e-ac1e-f6b0a184f095
CVE ID: CVE-2022-0440 State: PUBLISHED Published: 2022-03-07T08:16:42 Last Updated: 2024-08-02T23:25:40.651Z Vendors: Unknown Products: Catch Themes Demo Import Problem Types: CWE-434 Description: The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to be imported, which could allow high privivilege admin to upload an arbitrary PHP file and gain RCE even in the case of an hardened blog (ie DISALLOW_UNFILTERED_HTML, DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS constants set to true) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/2239095f-8a66-4a5d-ab49-1662a40fddf1
CVE ID: CVE-2022-0441 State: PUBLISHED Published: 2022-03-07T08:16:43 Last Updated: 2024-08-02T23:25:40.380Z Vendors: Unknown Products: MasterStudy LMS – WordPress LMS Plugin Problem Types: CWE-269 Description: The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account, allowing unauthenticated users to register as an admin Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/173c2efe-ee9c-4539-852f-c242b4f728ed - https://plugins.trac.wordpress.org/changeset/2667195
CVE ID: CVE-2022-0442 State: PUBLISHED Published: 2022-03-07T08:16:45 Last Updated: 2024-08-02T23:25:40.616Z Vendors: Unknown Products: UsersWP – User Registration & User Profile Problem Types: CWE-639 Description: The UsersWP WordPress plugin before 1.2.3.1 is missing access controls when updating a user avatar, and does not make sure file names for user avatars are unique, allowing a logged in user to overwrite another users avatar. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9cf0822a-c9d6-4ebc-b905-95b143d1a692
CVE ID: CVE-2022-0443 State: PUBLISHED Published: 2022-02-02T00:00:00 Last Updated: 2024-08-02T23:25:40.652Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-416 Description: Use After Free in GitHub repository vim/vim prior to 8.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/b987c8cb-bbbe-4601-8a6c-54ff907c6b51 - https://github.com/vim/vim/commit/9b4a80a66544f2782040b641498754bcb5b8d461 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFXFAILMLUIK4MBUEZO4HNBNKYZRJ5AP/ - https://lists.fedoraproject.org/archives/list/package-
CVE ID: CVE-2022-0444 State: PUBLISHED Published: 2022-06-27T08:55:47 Last Updated: 2024-08-02T23:25:40.479Z Vendors: Unknown Products: Backup, Restore and Migrate WordPress Sites With the XCloner Plugin Problem Types: CWE-862 Missing Authorization, CWE-352 Cross-Site Request Forgery (CSRF) Description: The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have authorisation and CSRF checks when resetting its settings, allowing unauthenticated attackers to reset them, including generating a new backup encryption key. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9567d295-43c7-4e59-928
Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9567d295-43c7-4e59-9283-c7726f16d40b
CVE ID: CVE-2022-0445 State: PUBLISHED Published: 2022-03-07T08:16:46 Last Updated: 2024-08-02T23:25:40.629Z Vendors: Unknown Products: WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent Problem Types: CWE-352 Description: The WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent WordPress plugin before 2.14.2 does not have CSRF checks in place when resetting its settings, allowing attackers to make a logged in admin reset them via a CSRF attack Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d9f28255-0026-4c42-9e67-d17b618c2285
CVE ID: CVE-2022-0446 State: PUBLISHED Published: 2022-08-22T14:57:00 Last Updated: 2024-08-02T23:25:40.618Z Vendors: Unknown Products: Simple Banner Problem Types: CWE-79 Description: The Simple Banner WordPress plugin before 2.12.0 does not properly sanitize its "Simple Banner Text" Settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3fc7986e-3b38-4e16-9516-2ae00bc7a581
CVE ID: CVE-2022-0447 State: PUBLISHED Published: 2022-04-11T14:40:44 Last Updated: 2024-08-02T23:25:40.471Z Vendors: Unknown Products: Post Grid Problem Types: CWE-79 Description: The Post Grid WordPress plugin before 2.1.16 does not sanitise and escape the post_types parameter before outputting it back in the response of the post_grid_update_taxonomies_terms_by_posttypes AJAX action, available to any authenticated users, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/91ca2cc9-951e-4e96-96ff-3bf131209dbe
CVE ID: CVE-2022-0448 State: PUBLISHED Published: 2022-03-07T08:16:48 Last Updated: 2024-08-02T23:25:40.442Z Vendors: Unknown Products: CP Blocks Problem Types: CWE-79 Description: The CP Blocks WordPress plugin before 1.0.15 does not sanitise and escape its "License ID" settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d4ff63ee-28e6-486e-9aa7-c878b97f707c
CVE ID: CVE-2022-0449 State: PUBLISHED Published: 2022-03-14T14:41:32 Last Updated: 2024-08-02T23:25:40.432Z Vendors: Unknown Products: Flexi – Guest Submit Problem Types: CWE-79 Description: The Flexi WordPress plugin before 4.20 does not sanitise and escape various parameters before outputting them back in some pages such as the user dashboard, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3cc1bb3c-e124-43d3-bc84-a493561a1387
CVE ID: CVE-2022-0450 State: PUBLISHED Published: 2022-03-28T17:22:50 Last Updated: 2024-08-02T23:25:40.610Z Vendors: Unknown Products: Menu Image, Icons made easy Problem Types: CWE-116 Improper Encoding or Escaping of Output Description: The Menu Image, Icons made easy WordPress plugin before 3.0.6 does not have authorisation and CSRF checks when saving menu settings, and does not validate, sanitise and escape them. As a result, any authenticate users, such as subscriber can update the settings or arbitrary menu and put Cross-Site Scripting payloads in them which will be triggered in the related menu in the frontend Additional Analyst Notes: - CVE Program Container: References: - https://w
triggered in the related menu in the frontend Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/612f9273-acc8-4be6-b372-33f1e687f54a
CVE ID: CVE-2022-0451 State: PUBLISHED Published: 2022-02-18T13:35:11.903Z Last Updated: 2025-04-21T13:56:39.087Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Google LLC Products: Dart SDK Problem Types: CWE-305 Description: Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin redirects. These headers may be explicitly set and contain sensitive information. By default, HttpClient handles redirection logic. If a request is sent to example.com with authorization header and it redirects to an attackers site, they might not expect attacker site to receive authorization header. We recommend updatin
edirects to an attackers site, they might not expect attacker site to receive authorization header. We recommend updating the Dart SDK to version 2.16.0 or beyond. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://dart-review.googlesource.com/c/sdk/+/229947 - https://github.com/dart-lang/sdk/commit/57db739be0ad4629079bfa94840064f615d35abc
CVE ID: CVE-2022-0452 State: PUBLISHED Published: 2022-04-05T00:50:34 Last Updated: 2024-08-02T23:25:40.383Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1284584 - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html
CVE ID: CVE-2022-0453 State: PUBLISHED Published: 2022-04-05T00:50:45 Last Updated: 2024-08-02T23:25:40.491Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Reader Mode in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1284916
CVE ID: CVE-2022-0454 State: PUBLISHED Published: 2022-04-05T00:51:01 Last Updated: 2024-08-02T23:25:40.484Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in ANGLE in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1287962
CVE ID: CVE-2022-0455 State: PUBLISHED Published: 2022-04-05T00:51:17 Last Updated: 2024-08-02T23:25:40.523Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 98.0.4758.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1270593
CVE ID: CVE-2022-0456 State: PUBLISHED Published: 2022-04-05T00:51:19 Last Updated: 2024-08-02T23:25:40.459Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Web Search in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via profile destruction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1289523
CVE ID: CVE-2022-0457 State: PUBLISHED Published: 2022-04-05T00:51:20 Last Updated: 2024-08-02T23:25:40.461Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1274445
CVE ID: CVE-2022-0458 State: PUBLISHED Published: 2022-04-05T00:51:22 Last Updated: 2024-08-02T23:25:40.429Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1267060
CVE ID: CVE-2022-0459 State: PUBLISHED Published: 2022-04-05T00:51:23 Last Updated: 2024-08-02T23:25:40.322Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Screen Capture in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process and convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1244205
CVE ID: CVE-2022-0460 State: PUBLISHED Published: 2022-04-05T00:51:25 Last Updated: 2024-08-02T23:25:40.652Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Window Dialogue in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1250227
CVE ID: CVE-2022-0461 State: PUBLISHED Published: 2022-04-05T00:51:26 Last Updated: 2024-08-02T23:25:40.469Z Vendors: Google Products: Chrome Problem Types: Policy bypass Description: Policy bypass in COOP in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to bypass iframe sandbox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1256823
CVE ID: CVE-2022-0462 State: PUBLISHED Published: 2022-04-05T00:51:28 Last Updated: 2024-08-02T23:25:40.643Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Scroll in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1270470
CVE ID: CVE-2022-0463 State: PUBLISHED Published: 2022-04-05T00:51:29 Last Updated: 2024-08-02T23:25:40.452Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1268240
CVE ID: CVE-2022-0464 State: PUBLISHED Published: 2022-04-05T00:51:30 Last Updated: 2024-08-02T23:32:45.315Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1270095
CVE ID: CVE-2022-0465 State: PUBLISHED Published: 2022-04-05T00:51:32 Last Updated: 2024-08-02T23:32:44.757Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Extensions in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1281941
CVE ID: CVE-2022-0466 State: PUBLISHED Published: 2022-04-05T00:51:33 Last Updated: 2024-08-02T23:32:44.789Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Extensions Platform in Google Chrome prior to 98.0.4758.80 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1115460
CVE ID: CVE-2022-0467 State: PUBLISHED Published: 2022-04-05T00:51:35 Last Updated: 2024-08-02T23:32:44.779Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Pointer Lock in Google Chrome on Windows prior to 98.0.4758.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html - https://crbug.com/1239496