Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
u.com/security/notices/USN-5564-1 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2585 - https://ubuntu.com/security/notices/USN-5567-1 - https://lore.kernel.org/lkml/20220809170751.164716-1-cascardo@canonical.com/T/#u - https://www.openwall.com/lists/oss-security/2022/08/09/7 - https://ubuntu.com/security/notices/USN-5565-1
CVE ID: CVE-2022-2586 State: PUBLISHED Published: 2024-01-08T17:46:06.110Z Last Updated: 2025-10-21T23:05:29.297Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: The Linux Kernel Organization Products: linux Problem Types: CWE-416 Description: It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ubuntu.com/security/notices/USN-5564-1 - https://ubuntu.com/security/notices/USN-5560-2 - https://ubuntu.com/security/notices/USN-5582-1 - https://ubuntu.com/securit
s://ubuntu.com/security/notices/USN-5560-2 - https://ubuntu.com/security/notices/USN-5582-1 - https://ubuntu.com/security/notices/USN-5567-1 - https://ubuntu.com/security/notices/USN-5560-1 - https://ubuntu.com/security/notices/USN-5566-1 - https://www.openwall.com/lists/oss-security/2022/08/09/5 - https://ubuntu.com/security/notices/USN-5565-1 - https://www.zerodayinitiative.com/advisories/ZDI-22-1118/ - https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#t - https://ubuntu.com/security/notices/USN-5562-1 - https://ubuntu.com/security/notices/USN-5557-1 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586
CVE ID: CVE-2022-2587 State: PUBLISHED Published: 2022-08-12T19:35:38 Last Updated: 2024-08-03T00:39:08.106Z Vendors: Google Products: Chrome Problem Types: Out of bounds write Description: Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102.0.5005.125 allowed a remote attacker to potentially exploit heap corruption via crafted audio metadata. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1320917 - https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-chromeos.html
CVE ID: CVE-2022-2588 State: PUBLISHED Published: 2024-01-08T17:50:47.948Z Last Updated: 2025-05-22T18:23:25.184Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: The Linux Kernel Organization Products: linux Problem Types: CWE-416 Description: It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ubuntu.com/security/notices/USN-5565-1 - https://ubuntu.com/security/notices/USN-5562-1 - https://www.openwall.com/lists/oss-security/2022/08/09/6
s/USN-5565-1 - https://ubuntu.com/security/notices/USN-5562-1 - https://www.openwall.com/lists/oss-security/2022/08/09/6 - https://ubuntu.com/security/notices/USN-5582-1 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588 - https://ubuntu.com/security/notices/USN-5564-1 - https://ubuntu.com/security/notices/USN-5566-1 - https://www.zerodayinitiative.com/advisories/ZDI-22-1117/ - https://ubuntu.com/security/notices/USN-5588-1 - https://ubuntu.com/security/notices/USN-5560-1 - https://github.com/Markakd/CVE-2022-2588 - https://ubuntu.com/security/notices/USN-5567-1 - https://ubuntu.com/security/notices/USN-5560-2 - https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@cano
- https://ubuntu.com/security/notices/USN-5560-2 - https://lore.kernel.org/netdev/20220809170518.164662-1-cascardo@canonical.com/T/#u - https://ubuntu.com/security/notices/USN-5557-1
CVE ID: CVE-2022-2589 State: PUBLISHED Published: 2022-08-01T14:12:23 Last Updated: 2024-08-03T00:39:08.261Z Severity: MEDIUM (CVSS 6.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N) Vendors: beancount Products: beancount/fava Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.3. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/8705800d-cf2f-433d-9c3e-dbef6a3f7e08 - https://github.com/beancount/fava/commit/68bbb6e39319deb35ab9f18d0b6aa9fa70472539
CVE ID: CVE-2022-2590 State: PUBLISHED Published: 2022-08-31T15:32:57 Last Updated: 2024-08-03T00:39:07.998Z Vendors: n/a Products: Linux kernel Problem Types: CWE-362 Description: A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of private read-only shared memory mappings. This flaw allows an unprivileged, local user to gain write access to read-only memory mappings, increasing their privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2022/08/08/1 - https://lore.kernel.org/linux-mm/20220808073232.8808-1-david%40redhat.com/
CVE ID: CVE-2022-2591 State: PUBLISHED Published: 2022-07-31T00:00:00 Last Updated: 2024-08-03T00:39:07.986Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: TEM Products: FLEX-1085 Problem Types: CWE-404 Description: A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0. Affected is an unknown function of the file /sistema/flash/reboot. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.205344 - http://packetstormsecurity.com/files/172323/FLEX-Denial-O
rogram Container: References: - https://vuldb.com/?id.205344 - http://packetstormsecurity.com/files/172323/FLEX-Denial-Of-Service.html
CVE ID: CVE-2022-2592 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T19:16:27.656Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: A lack of length validation in Snippet descriptions in GitLab CE/EE affecting all versions prior to 15.1.6, 15.2 prior to 15.2.4 and 15.3 prior to 15.3.2 allows an authenticated attacker to create a maliciously large Snippet which when requested with or without authentication places excessive load on the server, potential leading to Denial of Service. Additional Analyst Notes: - CVE Program Container: - C
ssive load on the server, potential leading to Denial of Service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/362566 - https://hackerone.com/reports/1544507 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2592.json
CVE ID: CVE-2022-2593 State: PUBLISHED Published: 2022-08-22T15:04:52 Last Updated: 2024-08-03T00:39:07.994Z Vendors: Unknown Products: Better Search Replace Problem Types: CWE-89 Description: The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/229a065e-1062-44d4-818d-29aa3b6b6d41
CVE ID: CVE-2022-2594 State: PUBLISHED Published: 2022-08-22T15:05:03 Last Updated: 2024-08-03T00:39:08.043Z Vendors: TODO Products: Advanced Custom Fields, Advanced Custom Fields Pro Problem Types: CWE-434 Description: The Advanced Custom Fields WordPress plugin before 5.12.3, Advanced Custom Fields Pro WordPress plugin before 5.12.3 allows unauthenticated users to upload files allowed in a default WP configuration (so PHP is not possible) if there is a frontend form available. This vulnerability was introduced in the 5.0 rewrite and did not exist prior to that release. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3fde5336-552c-4861-8b4d-
ditional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3fde5336-552c-4861-8b4d-89a16735c0e2 - https://www.pritect.net/blog/advanced-custom-fields-5-12-3-can-allow-unauthenticated-users-to-upload-arbitrary-files
CVE ID: CVE-2022-2595 State: PUBLISHED Published: 2022-08-01T14:13:06 Last Updated: 2024-08-03T00:46:02.905Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: kromitgmbh Products: kromitgmbh/titra Problem Types: CWE-285 Description: Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/1c6afb84-2025-46d8-9e9f-cbfc20e5d04d - https://github.com/kromitgmbh/titra/commit/fe8c3cdeb70e53b9f38f1022186ab16324d332c5
CVE ID: CVE-2022-2596 State: PUBLISHED Published: 2022-08-01T14:13:20 Last Updated: 2024-08-03T00:46:02.979Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: node-fetch Products: node-fetch/node-fetch Problem Types: CWE-1333 Description: Inefficient Regular Expression Complexity in GitHub repository node-fetch/node-fetch prior to 3.2.10. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a7e6a136-0a4b-46c4-ad20-802f1dd60bf7 - https://github.com/node-fetch/node-fetch/commit/28802387292baee467e042e168d92597b5bbbe3d
CVE ID: CVE-2022-2597 State: PUBLISHED Published: 2022-09-05T12:35:21 Last Updated: 2024-08-03T00:46:03.062Z Vendors: Unknown Products: Visual Portfolio, Photo Gallery & Post Grid Problem Types: CWE-863 Description: The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin before 2.19.0 does not have proper authorisation checks in some of its REST endpoints, allowing users with a role as low as contributor to call them and inject arbitrary CSS in arbitrary saved layouts Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3ffcee7c-1e03-448c-8006-a9405658cdb7
CVE ID: CVE-2022-2598 State: PUBLISHED Published: 2022-08-01T00:00:00 Last Updated: 2024-08-03T00:46:03.472Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-787 Description: Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/2f08363a-47a2-422d-a7de-ce96a89ad08e - https://github.com/vim/vim/commit/4e677b9c40ccbc5f090971b31dc2fe07bf05541d - https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
CVE ID: CVE-2022-2599 State: PUBLISHED Published: 2022-08-29T17:15:37 Last Updated: 2024-08-03T00:46:03.068Z Vendors: Unknown Products: Anti-Malware Security and Brute-Force Firewall Problem Types: CWE-79 Description: The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.21.83 does not sanitise and escape some parameters before outputting them back in an admin dashboard, leading to Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/276a7fc5-3d0d-446d-92cf-20060aecd0ef
CVE ID: CVE-2022-2600 State: PUBLISHED Published: 2022-08-22T15:05:12 Last Updated: 2024-08-03T00:46:03.164Z Vendors: Unknown Products: Auto-hyperlink URLs Problem Types: CWE-1022 Description: The Auto-hyperlink URLs WordPress plugin through 5.4.1 does not set rel="noopener noreferer" on generated links, which can lead to Tab Nabbing by giving the target site access to the source tab through the window.opener DOM object. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/01bbdefd-bdc3-43ef-9f35-6e7ebe786be2
CVE ID: CVE-2022-2601 State: PUBLISHED Published: 2022-12-14T00:00:00 Last Updated: 2024-08-22T01:13:28.591Z Vendors: n/a Products: grub2 Problem Types: CWE-122 Description: A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph, this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this vulnerability to circumvent the secure boot mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2112975#c0 - https://security.netapp.com/advisor
am Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2112975#c0 - https://security.netapp.com/advisory/ntap-20230203-0004/ - https://security.gentoo.org/glsa/202311-14
CVE ID: CVE-2022-2602 State: PUBLISHED Published: 2024-01-08T17:56:16.403Z Last Updated: 2025-04-17T17:54:49.459Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: The Linux Kernel Organization Products: linux Problem Types: CWE-416 Description: io_uring UAF, Unix SCM garbage collection Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ubuntu.com/security/notices/USN-5692-1 - https://ubuntu.com/security/notices/USN-5752-1 - https://ubuntu.com/security/notices/USN-5693-1 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602 - https://ubuntu.com/security/notices/USN-5691-1 - https://ubuntu.com/security/not
gi-bin/cvename.cgi?name=CVE-2022-2602 - https://ubuntu.com/security/notices/USN-5691-1 - https://ubuntu.com/security/notices/USN-5700-1 - http://packetstormsecurity.com/files/176533/Linux-Broken-Unix-GC-Interaction-Use-After-Free.html
CVE ID: CVE-2022-2603 State: PUBLISHED Published: 2022-08-12T19:35:43 Last Updated: 2024-08-03T00:46:03.108Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1325699 - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2604 State: PUBLISHED Published: 2022-08-12T19:35:50 Last Updated: 2024-08-03T00:46:03.364Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1335316 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVY
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2605 State: PUBLISHED Published: 2022-08-12T19:35:57 Last Updated: 2024-08-03T00:46:03.350Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Out of bounds read in Dawn in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1338470 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE
ists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2606 State: PUBLISHED Published: 2022-08-12T19:36:03 Last Updated: 2024-08-03T00:46:03.366Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a specific Enterprise policy to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1330489 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce
om/1330489 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2607 State: PUBLISHED Published: 2022-08-12T19:36:08 Last Updated: 2024-08-03T00:46:02.934Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1286203 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T
//crbug.com/1286203 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2608 State: PUBLISHED Published: 2022-08-12T19:36:16 Last Updated: 2024-08-03T00:46:03.270Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1330775 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/pac
tps://crbug.com/1330775 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2609 State: PUBLISHED Published: 2022-08-12T19:36:23 Last Updated: 2024-08-03T00:46:02.983Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1338560 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/pack
ps://crbug.com/1338560 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2610 State: PUBLISHED Published: 2022-08-12T19:36:29 Last Updated: 2024-08-03T00:46:03.411Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1278255 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJUR
lsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2611 State: PUBLISHED Published: 2022-08-12T19:36:35 Last Updated: 2024-08-03T00:46:03.379Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Fullscreen API in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1320538 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2612 State: PUBLISHED Published: 2022-08-12T19:36:41 Last Updated: 2024-08-03T00:46:03.329Z Vendors: Google Products: Chrome Problem Types: Side-channel information leakage Description: Side-channel information leakage in Keyboard input in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1321350 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproje
te-for-desktop.html - https://crbug.com/1321350 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2613 State: PUBLISHED Published: 2022-08-12T19:36:48 Last Updated: 2024-08-03T00:46:03.177Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in specific user interactions to potentially exploit heap corruption via specific UI interactions. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1325256 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-anno
ug.com/1325256 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE ID: CVE-2022-2614 State: PUBLISHED Published: 2022-08-12T19:36:54 Last Updated: 2024-08-03T00:46:02.953Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1341907 - https://security.gentoo.org/glsa/202208-35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE