Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-1464 State: PUBLISHED Published: 2022-05-05T13:45:12 Last Updated: 2024-08-03T00:03:06.270Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: gogs Products: gogs/gogs Problem Types: CWE-79 Description: Stored xss bug in GitHub repository gogs/gogs prior to 0.12.7. As the repo is public , any user can view the report and when open the attachment then xss is executed. This bug allow executed any javascript code in victim account . Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/34a12146-3a5d-4efc-a0f8-7a3ae04b198d - https://github.com/gogs/gogs/commit/bc77440b301ac8780698be91dff1ac33b7cee850
CVE ID: CVE-2022-1465 State: PUBLISHED Published: 2022-05-16T14:31:08 Last Updated: 2024-08-03T00:03:06.318Z Vendors: Unknown Products: WPC Smart Wishlist for WooCommerce Problem Types: CWE-79 Description: The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.9 does not sanitise and escape a parameter before outputting it back in an attribute via an AJAX action, leading to a Reflected Cross-Site Scripting issue. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/6781033a-f166-4198-874f-3e142854daf7
CVE ID: CVE-2022-1466 State: PUBLISHED Published: 2022-04-26T18:33:22 Last Updated: 2024-08-03T00:03:06.380Z Vendors: n/a Products: rhsso Problem Types: CWE-863 Description: Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2050228 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-076.txt - https://www.syss.de/pentest-blog/fehlerhafte-autorisierung-bei-red-hat-single-sign-
ionen/Advisories/SYSS-2021-076.txt - https://www.syss.de/pentest-blog/fehlerhafte-autorisierung-bei-red-hat-single-sign-on-750ga-syss-2021-076
CVE ID: CVE-2022-1467 State: PUBLISHED Published: 2022-05-23T19:17:02.000Z Last Updated: 2025-04-16T16:19:11.145Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: AVEVA Products: AVEVA InTouch Access Anywhere, AVEVA Plant SCADA Access Anywhere Problem Types: CWE-668 Description: Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape fr
t is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.aveva.com/en/support-and-success/cyber-security-updates/ - https://www.cisa.gov/uscert/ics/advisories/icsa-22-130-05
CVE ID: CVE-2022-1468 State: PUBLISHED Published: 2022-05-05T16:20:23.680052Z Last Updated: 2024-09-16T18:14:10.513Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: F5 Products: BIG-IP Problem Types: CWE-400 Description: On all versions of 17.0.x, 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x on F5 BIG-IP, an authenticated iControl REST user with at least guest role privileges can cause processing delays to iControl REST requests via undisclosed requests. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K1510140
t evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K15101402
CVE ID: CVE-2022-1469 State: PUBLISHED Published: 2022-06-06T08:51:02 Last Updated: 2024-08-03T00:03:06.284Z Vendors: Unknown Products: FiboSearch – Ajax Search for WooCommerce Problem Types: CWE-79 Description: The FiboSearch WordPress plugin before 1.17.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/88869380-173d-4d4f-81d8-3c20add5f98d
CVE ID: CVE-2022-1470 State: PUBLISHED Published: 2022-06-27T08:56:46 Last Updated: 2024-08-03T00:03:06.180Z Vendors: Unknown Products: Ultimate WooCommerce CSV Importer Problem Types: CWE-79 Description: The Ultimate WooCommerce CSV Importer WordPress plugin through 2.0 does not sanitise and escape the imported data before outputting it back in the page, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/13bb796f-7a17-47c9-a46f-a1d6ca4b6b91
CVE ID: CVE-2022-1471 State: PUBLISHED Published: 2022-12-01T10:47:07.203Z Last Updated: 2025-06-18T08:32:58.546Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: SnakeYAML Products: SnakeYAML Problem Types: CWE-20 Description: SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
to version 2.0 and beyond. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2 - https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479 - https://github.com/mbechler/marshalsec - https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true - https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc - https://security.netapp.com/advisory/ntap-20230818-0015/ - http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html - http://www.openw
ecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html - http://www.openwall.com/lists/oss-security/2023/11/19/1 - https://security.netapp.com/advisory/ntap-20240621-0006/ - https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c - https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html
CVE ID: CVE-2022-1472 State: PUBLISHED Published: 2022-06-20T10:25:49 Last Updated: 2024-08-03T00:03:06.260Z Vendors: Unknown Products: Better Find and Replace Problem Types: CWE-89 Description: The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9c608b14-dc5e-469e-b97a-84696fae804c
CVE ID: CVE-2022-1473 State: PUBLISHED Published: 2022-05-03T15:15:25.051Z Last Updated: 2025-05-05T16:42:05.402Z Vendors: OpenSSL Products: OpenSSL Problem Types: Denial of Service Description: The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when decoding certificates or keys. If a long lived process periodically decodes certificates or keys its memory usage will expand without bounds and the process might be terminated by the operating system causing a denial of service. Also traversing the empty hash table entries will take increasingly more time. Typically such l
ing a denial of service. Also traversing the empty hash table entries will take increasingly more time. Typically such long lived processes might be TLS clients or TLS servers configured to accept client certificate authentication. The function was added in the OpenSSL 3.0 version thus older releases are not affected by the issue. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openssl.org/news/secadv/20220503.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=64c85430f95200b6b51fe9475bd5203f7c19daf1 - https://security.netapp.com/advisory/ntap-20220602-0009/ - https:
mitdiff%3Bh=64c85430f95200b6b51fe9475bd5203f7c19daf1 - https://security.netapp.com/advisory/ntap-20220602-0009/ - https://security.gentoo.org/glsa/202210-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf
CVE ID: CVE-2022-1474 State: PUBLISHED Published: 2022-07-11T12:55:45 Last Updated: 2024-08-03T00:03:06.292Z Vendors: Unknown Products: WP Event Manager – Easily Build your Calendar of Events! Problem Types: CWE-79 Description: The WP Event Manager WordPress plugin before 3.1.28 does not sanitise and escape its search before outputting it back in an attribute on the event dashboard, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/2d821464-c502-4f71-afee-97b3dea16612
CVE ID: CVE-2022-1475 State: PUBLISHED Published: 2022-05-02T00:00:00 Last Updated: 2024-08-03T00:03:06.352Z Vendors: n/a Products: FFmpeg Problem Types: CWE-190 Description: An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/9651 - https://bugzilla.redhat.com/show_bug.cgi?id=2076764 - https://security.gentoo.org/glsa/202312-14
CVE ID: CVE-2022-1476 State: PUBLISHED Published: 2022-05-10T19:21:57 Last Updated: 2024-08-03T00:03:06.266Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: yaniiliev Products: All-in-One WP Migration Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary file deletion via directory traversal due to insufficient file validation via the ~/lib/model/class-ai1wm-backups.php file, in versions up to, and including, 7.58. This can be exploited by administrative users, and users who have access to the site's secret key. Additional A
g, 7.58. This can be exploited by administrative users, and users who have access to the site's secret key. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e58634c3-7fcd-4885-b897-4e6a97fb06ac?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2715609%40all-in-one-wp-migration&new=2715609%40all-in-one-wp-migration&sfp_email=&sfph_mail= - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1476
CVE ID: CVE-2022-1477 State: PUBLISHED Published: 2022-07-26T21:30:53 Last Updated: 2024-08-03T00:03:06.344Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Vulkan in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1313905 - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1478 State: PUBLISHED Published: 2022-07-26T21:31:07 Last Updated: 2024-08-03T00:03:06.350Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in SwiftShader in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1299261 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1479 State: PUBLISHED Published: 2022-07-26T21:31:20 Last Updated: 2024-08-03T00:03:06.435Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in ANGLE in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1305190 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1480 State: REJECTED Published: 2022-10-03T13:50:09 Last Updated: 2022-10-03T13:50:09 Description: No description available.
CVE ID: CVE-2022-1481 State: PUBLISHED Published: 2022-07-26T21:31:33 Last Updated: 2024-08-03T00:03:06.350Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Sharing in Google Chrome on Mac prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1302949 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1482 State: PUBLISHED Published: 2022-07-26T21:31:43 Last Updated: 2024-08-03T00:03:06.361Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in WebGL in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1304987 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1483 State: PUBLISHED Published: 2022-07-26T21:31:53 Last Updated: 2024-08-03T00:03:06.301Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in WebGPU in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1314754 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1484 State: PUBLISHED Published: 2022-07-26T21:32:06 Last Updated: 2024-08-03T00:03:06.380Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Web UI Settings in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1297429 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1485 State: PUBLISHED Published: 2022-07-26T21:32:20 Last Updated: 2024-08-03T00:03:06.361Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in File System API in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1299743 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1486 State: PUBLISHED Published: 2022-07-26T21:32:31 Last Updated: 2024-08-03T00:03:06.289Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1314616 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1487 State: PUBLISHED Published: 2022-07-26T21:32:41 Last Updated: 2024-08-03T00:03:06.410Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Ozone in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via running a Wayland test. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1304368 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1488 State: PUBLISHED Published: 2022-07-26T21:32:58 Last Updated: 2024-08-03T00:03:06.328Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1302959 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1489 State: PUBLISHED Published: 2022-07-26T21:33:11 Last Updated: 2024-08-03T00:03:06.295Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific user interactions. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1300561 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1490 State: PUBLISHED Published: 2022-07-26T21:33:25 Last Updated: 2024-08-03T00:03:06.282Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Browser Switcher in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1301840 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1491 State: PUBLISHED Published: 2022-07-26T21:33:38 Last Updated: 2024-08-03T00:03:06.365Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Bookmarks in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1305706 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1492 State: PUBLISHED Published: 2022-07-26T21:33:55 Last Updated: 2024-08-03T00:03:06.276Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in Blink Editing in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to inject arbitrary scripts or HTML via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1315040 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1493 State: PUBLISHED Published: 2022-07-26T21:34:08 Last Updated: 2024-08-03T00:03:06.281Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1275414 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1494 State: PUBLISHED Published: 2022-07-26T21:34:21 Last Updated: 2024-08-03T00:03:06.289Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in Trusted Types in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass trusted types policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1298122 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1495 State: PUBLISHED Published: 2022-07-26T21:34:35 Last Updated: 2024-08-03T00:03:06.351Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a remote attacker to spoof the APK downloads dialog via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1301180 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1496 State: PUBLISHED Published: 2022-07-26T21:34:51 Last Updated: 2024-08-03T00:03:06.296Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in File Manager in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1306391 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1497 State: PUBLISHED Published: 2022-07-26T21:35:05 Last Updated: 2024-08-03T00:03:06.296Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Input in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to spoof the contents of cross-origin websites via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1264543 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-1498 State: PUBLISHED Published: 2022-07-26T21:35:19 Last Updated: 2024-08-03T00:03:06.352Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in HTML Parser in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1297138 - https://security.gentoo.org/glsa/202208-25