Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-0775 State: PUBLISHED Published: 2024-01-16T15:52:36.869Z Last Updated: 2025-06-11T17:11:59.017Z Vendors: Unknown Products: WooCommerce Problem Types: CWE-863 Incorrect Authorization Description: The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b76dbf37-a0a2-48cf-bd85-3ebbc2f394dd/ - https://plugins.trac.wordpress.org/changeset/2683324 - https://developer.woocommerce.com/2022/02/22/woocommerce-6-2-1-securi
s://plugins.trac.wordpress.org/changeset/2683324 - https://developer.woocommerce.com/2022/02/22/woocommerce-6-2-1-security-fix/
CVE ID: CVE-2022-0776 State: PUBLISHED Published: 2022-03-01T08:40:09 Last Updated: 2024-08-02T23:40:04.091Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: hakimel Products: hakimel/reveal.js Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - DOM in GitHub repository hakimel/reveal.js prior to 4.3.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/be2b7ee4-f487-42e1-874a-6bcc410e4001 - https://github.com/hakimel/reveal.js/commit/32cdd3b1872ba8e2267c9e87ae216cb55f40f4d2
CVE ID: CVE-2022-0777 State: PUBLISHED Published: 2022-03-01T08:50:09 Last Updated: 2024-08-02T23:40:03.925Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: microweber Products: microweber/microweber Problem Types: CWE-640 Description: Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/b36be8cd-544f-42bd-990d-aa1a46df44d7 - https://github.com/microweber/microweber/commit/a3944cf9d1d8c41a48297ddc98302934e2511b0f
CVE ID: CVE-2022-0778 State: PUBLISHED Published: 2022-03-15T17:05:20.382533Z Last Updated: 2024-09-17T00:01:02.190Z Vendors: OpenSSL Products: OpenSSL Problem Types: Infinite loop Description: The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verificati
crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 ellip
omers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects Op
se a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc). Additional Analyst Notes: - CVE Program Container: References: - https://www.openssl.org/news/secadv/20220315.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452
50cd10601390e587451246 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83 - https://www.debian.org/security/2022/dsa-5103 - https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html - https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/ - https:/
project.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20220321-0002/ - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002 - https://www.tenable.com/security/tns-2022-06 - https://www.tenable.com/security/tns-2022-07 - https://www.tenable.com/security/tns-2022-08 - http://seclists.org/fulldisclosure/2022/May/33 - http://seclists.org/fulldisclosure/2022/May/35 - http://seclists.org/fulldisclosur
ists.org/fulldisclosure/2022/May/33 - http://seclists.org/fulldisclosure/2022/May/35 - http://seclists.org/fulldisclosure/2022/May/38 - https://www.oracle.com/security-alerts/cpujul2022.html - https://support.apple.com/kb/HT213257 - https://support.apple.com/kb/HT213256 - https://support.apple.com/kb/HT213255 - https://www.tenable.com/security/tns-2022-09 - https://security.netapp.com/advisory/ntap-20220429-0005/ - http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html - https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf - https://security.gentoo.org/glsa/202210-02 - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2022-0779 State: PUBLISHED Published: 2022-06-06T08:50:49 Last Updated: 2024-08-02T23:40:03.785Z Vendors: Unknown Products: User Meta – User Profile Builder and User management plugin Problem Types: CWE-22 Description: The User Meta WordPress plugin before 2.4.4 does not validate the filepath parameter of its um_show_uploaded_file AJAX action, which could allow low privileged users such as subscriber to enumerate the local files on the web server via path traversal payloads Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9d4a3f09-b011-4d87-ab63-332e505cf1cd
CVE ID: CVE-2022-0780 State: PUBLISHED Published: 2022-04-18T17:10:36 Last Updated: 2024-08-02T23:40:04.226Z Vendors: Unknown Products: SearchIQ – The Search Solution Problem Types: CWE-79 Description: The SearchIQ WordPress plugin before 3.9 contains a flag to disable the verification of CSRF nonces, granting unauthenticated attackers access to the siq_ajax AJAX action and allowing them to perform Cross-Site Scripting attacks due to the lack of sanitisation and escaping in the customCss parameter Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0ee7d1a8-9782-4db5-b055-e732f2763825
CVE ID: CVE-2022-0781 State: PUBLISHED Published: 2022-05-23T07:15:22 Last Updated: 2024-08-02T23:40:04.198Z Vendors: Unknown Products: Nirweb support Problem Types: CWE-89 Description: The Nirweb support WordPress plugin before 2.8.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action (available to unauthenticated users), leading to an SQL injection Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/1a8f9c7b-a422-4f45-a516-c3c14eb05161
CVE ID: CVE-2022-0782 State: PUBLISHED Published: 2022-04-25T15:51:09 Last Updated: 2024-08-02T23:40:04.245Z Vendors: Unknown Products: Donations Problem Types: CWE-89 Description: The Donations WordPress plugin through 1.8 does not sanitise and escape the nd_donations_id parameter before using it in a SQL statement via the nd_donations_single_cause_form_validate_fields_php_function AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/b81e824c-d2b1-4381-abee-18c42bb5c2f5
CVE ID: CVE-2022-0783 State: PUBLISHED Published: 2022-05-02T16:05:45 Last Updated: 2024-08-02T23:40:04.289Z Vendors: Unknown Products: Multiple Shipping Address Woocommerce Problem Types: CWE-89 Description: The Multiple Shipping Address Woocommerce WordPress plugin before 2.0 does not properly sanitise and escape numerous parameters before using them in SQL statements via some AJAX actions available to unauthenticated users, leading to unauthenticated SQL injections Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/4d594424-8048-482d-b61c-45be1e97a8ba
CVE ID: CVE-2022-0784 State: PUBLISHED Published: 2022-03-28T17:23:21 Last Updated: 2024-08-02T23:40:04.291Z Vendors: Unknown Products: Title Experiments Free Problem Types: CWE-89 Description: The Title Experiments Free WordPress plugin before 9.0.1 does not sanitise and escape the id parameter before using it in a SQL statement via the wpex_titles AJAX action (available to unauthenticated users), leading to an unauthenticated SQL injection Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/6672b59f-14bc-4a22-9e0b-fcab4e01d97f
CVE ID: CVE-2022-0785 State: PUBLISHED Published: 2022-04-18T17:10:38 Last Updated: 2024-08-02T23:40:03.788Z Vendors: Unknown Products: Daily Prayer Time Problem Types: CWE-89 Description: The Daily Prayer Time WordPress plugin before 2022.03.01 does not sanitise and escape the month parameter before using it in a SQL statement via the get_monthly_timetable AJAX action (available to unauthenticated users), leading to an unauthenticated SQL injection Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e1e09f56-89a4-4d6f-907b-3fb2cb825255
CVE ID: CVE-2022-0786 State: PUBLISHED Published: 2022-06-13T12:41:32 Last Updated: 2024-08-02T23:40:03.723Z Vendors: Unknown Products: KiviCare – Clinic & Patient Management System (EHR) Problem Types: CWE-89 Description: The KiviCare WordPress plugin before 2.3.9 does not sanitise and escape some parameters before using them in SQL statements via the ajax_post AJAX action with the get_doctor_details route, leading to SQL Injections exploitable by unauthenticated users Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/53f493e9-273b-4349-8a59-f2207e8f8f30
CVE ID: CVE-2022-0787 State: PUBLISHED Published: 2022-03-28T17:23:23 Last Updated: 2024-08-02T23:40:04.305Z Vendors: Unknown Products: Limit Login Attempts (Spam Protection) Problem Types: CWE-89 Description: The Limit Login Attempts (Spam Protection) WordPress plugin before 5.1 does not sanitise and escape some parameters before using them in SQL statements via AJAX actions (available to unauthenticated users), leading to SQL Injections Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/69329a8a-2cbe-4f99-a367-b152bd85b3dd
CVE ID: CVE-2022-0788 State: PUBLISHED Published: 2022-06-06T08:50:51 Last Updated: 2024-08-02T23:40:04.349Z Vendors: Unknown Products: WP Fundraising Donation and Crowdfunding Platform Problem Types: CWE-89 Description: The WP Fundraising Donation and Crowdfunding Platform WordPress plugin before 1.5.0 does not sanitise and escape a parameter before using it in a SQL statement via one of it's REST route, leading to an SQL injection exploitable by unauthenticated users Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/fbc71710-123f-4c61-9796-a6a4fd354828
CVE ID: CVE-2022-0789 State: PUBLISHED Published: 2022-04-05T00:25:35 Last Updated: 2024-08-02T23:40:04.325Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1289383 - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0790 State: PUBLISHED Published: 2022-04-05T00:25:36 Last Updated: 2024-08-02T23:40:04.075Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1274077 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0791 State: PUBLISHED Published: 2022-04-05T00:25:38 Last Updated: 2024-08-02T23:40:03.929Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Omnibox in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via user interactions. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1278322 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0792 State: PUBLISHED Published: 2022-04-05T00:25:39 Last Updated: 2024-08-02T23:40:03.758Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Out of bounds read in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1285885 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0793 State: PUBLISHED Published: 2022-04-05T00:25:40 Last Updated: 2024-08-02T23:40:04.163Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1291728 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0794 State: PUBLISHED Published: 2022-04-05T00:25:42 Last Updated: 2024-08-02T23:40:04.252Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebShare in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1294097 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0795 State: PUBLISHED Published: 2022-04-05T00:25:43 Last Updated: 2024-08-02T23:40:04.160Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in Blink Layout in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1282782 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0796 State: PUBLISHED Published: 2022-04-05T00:25:45 Last Updated: 2024-08-02T23:40:04.251Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Media in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1295786 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0797 State: PUBLISHED Published: 2022-04-05T00:25:46 Last Updated: 2024-08-02T23:40:04.318Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1281908 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0798 State: PUBLISHED Published: 2022-04-05T00:25:47 Last Updated: 2024-08-02T23:40:04.322Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1283402 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0799 State: PUBLISHED Published: 2022-04-05T00:25:49 Last Updated: 2024-08-02T23:40:04.327Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1279188 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0800 State: PUBLISHED Published: 2022-04-05T00:25:50 Last Updated: 2024-08-02T23:40:04.298Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1242962 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0801 State: PUBLISHED Published: 2023-01-02T00:00:00 Last Updated: 2024-10-22T16:19:45.862Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass XSS preventions via a crafted HTML page. (Chrome security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1231037
CVE ID: CVE-2022-0802 State: PUBLISHED Published: 2022-04-05T00:25:52 Last Updated: 2024-08-02T23:40:04.433Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1270052 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0803 State: PUBLISHED Published: 2022-04-05T00:25:53 Last Updated: 2024-08-02T23:40:04.066Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Permissions in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to tamper with the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1280233 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0804 State: PUBLISHED Published: 2022-04-05T00:25:55 Last Updated: 2024-08-02T23:40:04.435Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1264561 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0805 State: PUBLISHED Published: 2022-04-05T00:25:56 Last Updated: 2024-08-02T23:40:04.517Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Browser Switcher in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1290700 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0806 State: PUBLISHED Published: 2022-04-05T00:25:57 Last Updated: 2024-08-02T23:40:04.206Z Vendors: Google Products: Chrome Problem Types: Data leak Description: Data leak in Canvas in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in screen sharing to potentially leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1283434 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2022-0807 State: PUBLISHED Published: 2022-04-05T00:25:59 Last Updated: 2024-08-02T23:40:04.353Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Autofill in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html - https://crbug.com/1287364 - https://security.gentoo.org/glsa/202208-25