Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ess control list. Netskope client restricts access to this file by allowing only read permissions as a standard user. Whenever the Netskope client service restarts, it deletes the logplaceholder and recreates, creating a race condition, which can be exploited by a malicious local user to create the file and set ACL permissions on the file. Once the file is created by a malicious user with proper ACL permissions, all files within C:\Users\Public\netSkope\ becomes modifiable by the unprivileged user. By using Windows pseudo-symlink, these files can be pointed to other places in the system and thus malicious users will be able to elevate privileges. Additional Analyst Notes: - CVE Program Conta
in the system and thus malicious users will be able to elevate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2023-002
CVE ID: CVE-2022-4150 State: PUBLISHED Published: 2022-12-26T12:28:03.526Z Last Updated: 2025-04-11T23:16:02.955Z Vendors: Unknown Products: Contest Gallery, Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the option_id POST parameter before concatenating it to an SQL query in order-custom-fields-with-and-without-search.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vuln
abase. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d5d39138-a216-46cd-9e5f-fc706a2c93da - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_13
CVE ID: CVE-2022-4151 State: PUBLISHED Published: 2022-12-26T12:28:16.819Z Last Updated: 2025-04-14T18:15:48.604Z Vendors: Unknown Products: Contest Gallery, Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the option_id GET parameter before concatenating it to an SQL query in export-images-data.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e1320c2a-818d-4e
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e1320c2a-818d-4e91-8dc9-ba95a1dc4377 - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_2
CVE ID: CVE-2022-4152 State: PUBLISHED Published: 2022-12-26T12:28:15.254Z Last Updated: 2025-04-14T13:45:43.617Z Vendors: Unknown Products: Contest Gallery, Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery WordPress plugin before 19.1.5, Contest Gallery Pro WordPress plugin before 19.1.5 do not escape the option_id POST parameter before concatenating it to an SQL query in edit-options.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4b058966-0859-42ed-a796-b
CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4b058966-0859-42ed-a796-b6c6cb08a9fc - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_4
CVE ID: CVE-2022-4153 State: PUBLISHED Published: 2022-12-26T12:27:56.990Z Last Updated: 2025-04-11T23:28:44.907Z Vendors: Unknown Products: Contest Gallery, Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the upload[] POST parameter before concatenating it to an SQL query in get-data-create-upload-v10.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/35b0126d
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/35b0126d-9293-4e64-a00f-0903303f960a - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_7
CVE ID: CVE-2022-4154 State: PUBLISHED Published: 2022-12-26T12:28:05.877Z Last Updated: 2025-04-14T14:18:40.271Z Vendors: Unknown Products: Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery Pro WordPress plugin before 19.1.5 does not escape the wp_user_id GET parameter before concatenating it to an SQL query in management-show-user.php. This may allow malicious users with at administrator privileges (i.e. on multisite WordPress configurations) to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/dac32ed4-d3df-420a-a2eb-9e7d24358
ram Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/dac32ed4-d3df-420a-a2eb-9e7d2435826a - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_5
CVE ID: CVE-2022-4155 State: PUBLISHED Published: 2022-12-26T12:27:58.593Z Last Updated: 2025-04-11T23:25:38.231Z Vendors: Unknown Products: Contest Gallery, Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the wp_user_id GET parameter before concatenating it to an SQL query in management-show-user.php. This may allow malicious users with administrator privileges (i.e. on multisite WordPress configurations) to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
n from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a55c6a62-3744-4374-b01a-cb074ac64b4d - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_6
CVE ID: CVE-2022-4156 State: PUBLISHED Published: 2022-12-26T12:28:07.463Z Last Updated: 2025-04-14T14:16:34.033Z Vendors: Unknown Products: Contest Gallery, Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the user_id POST parameter before concatenating it to an SQL query in ajax-functions-backend.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/254f6e8b-5fa9
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/254f6e8b-5fa9-4d6d-8e0e-1a4cae18aee0 - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_1
CVE ID: CVE-2022-4157 State: PUBLISHED Published: 2022-12-26T12:27:57.791Z Last Updated: 2025-04-11T23:27:16.019Z Vendors: Unknown Products: Contest Gallery, Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_option_id POST parameter before concatenating it to an SQL query in export-votes-all.php. This may allow malicious users with administrator privileges (i.e. on multisite WordPress configurations) to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/71feec63-67a5-482e-bf77-1396c306fae6 - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_3
CVE ID: CVE-2022-4158 State: PUBLISHED Published: 2022-12-26T12:28:02.718Z Last Updated: 2025-04-11T23:17:39.280Z Vendors: Unknown Products: Contest Gallery, Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_Fields POST parameter before concatenating it to an SQL query in users-registry-check-registering-and-login.php. This may allow malicious visitors to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1b3b51af-ad73-4f8e-
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1b3b51af-ad73-4f8e-ba97-375b8a363b64 - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_15
CVE ID: CVE-2022-4159 State: PUBLISHED Published: 2022-12-26T12:28:16.037Z Last Updated: 2025-04-14T13:27:55.666Z Vendors: Unknown Products: Contest Gallery, Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_id POST parameter before concatenating it to an SQL query in 0_change-gallery.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/2e993280-1007-4e9d-9c
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/2e993280-1007-4e9d-9ca6-2b5f774e9965 - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_8
CVE ID: CVE-2022-4160 State: PUBLISHED Published: 2022-12-26T12:28:17.582Z Last Updated: 2025-04-14T14:05:14.470Z Vendors: Unknown Products: Contest Gallery, Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_copy_id POST parameter before concatenating it to an SQL query in cg-copy-comments.php and cg-copy-rating.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnera
se. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/813de343-4814-42b8-b8df-1695320512cd - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_14
CVE ID: CVE-2022-4161 State: PUBLISHED Published: 2022-12-26T12:27:55.419Z Last Updated: 2025-04-14T14:21:40.708Z Vendors: Unknown Products: Contest Gallery, Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_copy_start POST parameter before concatenating it to an SQL query in copy-gallery-images.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a66af8f7-1
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a66af8f7-1d5f-4fe5-a2ba-03337064583b - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_16
CVE ID: CVE-2022-4162 State: PUBLISHED Published: 2022-12-26T12:28:10.597Z Last Updated: 2025-04-14T13:29:00.898Z Vendors: Unknown Products: Contest Gallery, Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_row POST parameter before concatenating it to an SQL query in 3_row-order.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/011500ac-17e4-4d4f-bbd9-1
CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/011500ac-17e4-4d4f-bbd9-1fec70511776 - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_9
CVE ID: CVE-2022-4163 State: PUBLISHED Published: 2022-12-26T12:28:05.085Z Last Updated: 2025-04-14T14:19:31.814Z Vendors: Unknown Products: Contest Gallery, Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_deactivate and cg_activate POST parameters before concatenating it to an SQL query in 2_deactivate.php and 4_activate.php, respectively. This may allow malicious users with at least author privilege to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
ion from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/de0d7db7-f911-4f5f-97f6-885ca60822d1 - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_10
CVE ID: CVE-2022-4164 State: PUBLISHED Published: 2022-12-26T12:28:09.824Z Last Updated: 2025-04-14T13:30:49.898Z Vendors: Unknown Products: Contest Gallery, Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_multiple_files_for_post POST parameter before concatenating it to an SQL query in 0_change-gallery.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/57fff222-2c64-4b52-86cd-ab8db4541627 - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_11
CVE ID: CVE-2022-4165 State: PUBLISHED Published: 2022-12-26T12:28:01.816Z Last Updated: 2025-04-11T23:20:05.228Z Vendors: Unknown Products: Contest Gallery, Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_order POST parameter before concatenating it to an SQL query in order-custom-fields-with-and-without-search.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulne
base. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/857aba7d-fccd-4672-b734-ab228440dcc0 - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_17
CVE ID: CVE-2022-4166 State: PUBLISHED Published: 2022-12-26T12:28:04.308Z Last Updated: 2025-04-11T23:13:55.632Z Vendors: Unknown Products: Contest Gallery, Contest Gallery Pro Problem Types: CWE-89 SQL Injection Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the addCountS POST parameter before concatenating it to an SQL query in 4_activate.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6e7de2bb-5f71-4c27-ae79
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6e7de2bb-5f71-4c27-ae79-4f6b2ba7f86f - https://bulletin.iese.de/post/contest-gallery_19-1-4-1_12
CVE ID: CVE-2022-4167 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T16:28:42.595Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2 allows group access tokens to continue working even after the group owner loses the ability to revoke them. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/367740 - https://gitlab.com/gitlab
- CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/367740 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4167.json
CVE ID: CVE-2022-4168 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-4169 State: PUBLISHED Published: 2022-11-28T17:33:31.980Z Last Updated: 2025-02-07T20:31:58.819Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/A:L/I:L/C:N/S:U/UI:N/PR:N/AC:L/AV:N) Vendors: marcinkazmierski Products: Theme and plugin translation for Polylang (TTfP) Problem Types: CWE-862 Missing Authorization Description: The Theme and plugin translation for Polylang is vulnerable to authorization bypass in versions up to, and including, 3.2.16 due to missing capability checks in the process_polylang_theme_translation_wp_loaded() function. This makes it possible for unauthenticated attackers to update plugin and theme translation settings and to import translation strings. Additional A
nauthenticated attackers to update plugin and theme translation settings and to import translation strings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2814605%40theme-translation-for-polylang%2Ftrunk&old=2812254%40theme-translation-for-polylang%2Ftrunk&sfp_email=&sfph_mail= - https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-4169
CVE ID: CVE-2022-4170 State: PUBLISHED Published: 2022-12-09T00:00:00.000Z Last Updated: 2025-04-14T18:11:13.443Z Vendors: n/a Products: rxvt-unicode Problem Types: CWE-74 Description: The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2151597 - https://www.openwall.com/lists/oss-security/2022/12/05/1 - https://security.gentoo.org/glsa/202310-20
CVE ID: CVE-2022-4171 State: PUBLISHED Published: 2022-12-13T20:16:52.649Z Last Updated: 2025-01-23T20:32:54.812Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: demonisblack Products: demon image annotation Problem Types: CWE-1284 Improper Validation of Specified Quantity in Input Description: The demon image annotation plugin for WordPress is vulnerable to improper input validation in versions up to, and including 5.0. This is due to the plugin improperly validating the number of characters supplied during an annotation despite there being a setting to limit the number characters input. This means that unauthenticated attackers can bypass the length restri
g a setting to limit the number characters input. This means that unauthenticated attackers can bypass the length restrictions and input more characters than allowed via the settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ac5549ec-f931-4b13-b5f9-0d6f3e53aae4 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2830349%40demon-image-annotation&new=2830349%40demon-image-annotation&sfp_email=&sfph_mail=
CVE ID: CVE-2022-4172 State: PUBLISHED Published: 2022-11-29T00:00:00.000Z Last Updated: 2025-04-14T18:10:14.679Z Vendors: n/a Products: QEMU (ACPI ERST) Problem Types: CWE-120 Description: An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_erst_record() and write_erst_record() functions. Both issues may allow the guest to overrun the host buffer allocated for the ERST memory device. A malicious guest could use these flaws to crash the QEMU process on the host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/qemu-devel/20221024154233.1043347-
CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/qemu-devel/20221024154233.1043347-1-lk%40c--e.de/ - https://gitlab.com/qemu-project/qemu/-/issues/1268 - https://gitlab.com/qemu-project/qemu/-/commit/defb7098 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7J5IRXJYLELW7D43A75LOWRUE5EU54O/ - https://security.netapp.com/advisory/ntap-20230127-0013/
CVE ID: CVE-2022-4173 State: PUBLISHED Published: 2022-12-05T23:15:33.724Z Last Updated: 2025-04-14T17:57:04.339Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: NortonLifeLock Products: Avast and AVG Antivirus Problem Types: CWE-269 Description: A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avast and AVG Antivirus version 22.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.norton.com/sp/static/external/tools/security-advisories.html
CVE ID: CVE-2022-4174 State: PUBLISHED Published: 2022-11-29T00:00:00 Last Updated: 2024-08-03T01:34:49.309Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html - https://crbug.com/1379054 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/202311-11
CVE ID: CVE-2022-4175 State: PUBLISHED Published: 2022-11-29T00:00:00 Last Updated: 2024-08-03T01:34:49.305Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Camera Capture in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html - https://crbug.com/1381401 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/202311-11
CVE ID: CVE-2022-4176 State: PUBLISHED Published: 2022-11-29T00:00:00 Last Updated: 2024-08-03T01:34:49.317Z Vendors: Google Products: Chrome Problem Types: Out of bounds write Description: Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html - https://crbug.com/1361066 - https://security.gentoo.org/glsa/202305-10 -