deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-1873
Published: 2022-07-27
Description: Insufficient policy enforcement in COOP in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-668
References: https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html; https://crbug.com/1305394; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-1874
Published: 2022-07-27
Description: Insufficient policy enforcement in Safe Browsing in Google Chrome on Mac prior to 102.0.5005.61 allowed a remote attacker to bypass downloads protection policy via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
References: https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html; https://crbug.com/1251588; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-1875
Published: 2022-07-27
Description: Inappropriate implementation in PDF in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-668
References: https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html; https://crbug.com/1306443; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-1876
Published: 2022-07-27
Description: Heap buffer overflow in DevTools in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html; https://crbug.com/1313600; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2021-46830
Published: 2022-07-27
Description: A path traversal vulnerability exists within GoAnywhere MFT before 6.8.3 that utilize self-registration for the GoAnywhere Web Client. This vulnerability could potentially allow an external user who self-registers with a specific username and/or profile information to gain access to files at a higher directory level than intended.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml; https://www.goanywhere.com/support/advisory/68x; https://www.goanywhere.com/support/release-notes/mft?limit=0
CVE: CVE-2021-33371
Published: 2022-07-28
Description: A stored cross-site scripting (XSS) vulnerability in /nav_bar_action.php of Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49865; https://www.exploit-db.com/exploits/49865
CVE: CVE-2022-34009
Published: 2022-07-28
Description: Fossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS payload in a ticket. This occurs because the ticket data is stored in a temporary file, and the product does not properly handle the absence of this file after Windows Defender has flagged it as malware.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://fossil-scm.org/home/doc/trunk/www/changes.wiki; https://gainsec.com/2022/07/27/cve-2022-34009/; https://fossil-scm.org/home/doc/trunk/www/changes.wiki
CVE: CVE-2022-34140
Published: 2022-07-28
Description: A stored cross-site scripting (XSS) vulnerability in /index.php?r=site%2Fsignup of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/168012/Feehi-CMS-2.1.1-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/168476/Feehi-CMS-2.1.1-Remote-Code-Execution.html; https://github.com/liufee/cms
CVE: CVE-2022-1919
Published: 2022-07-28
Description: Use after free in Codecs in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html; https://crbug.com/1313709; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE: CVE-2022-2007
Published: 2022-07-28
Description: Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop.html; https://crbug.com/1326210; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE: CVE-2022-2008
Published: 2022-07-28
Description: Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop.html; https://crbug.com/1317673; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE: CVE-2022-2010
Published: 2022-07-28
Description: Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-125
References: https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop.html; https://crbug.com/1325298; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE: CVE-2022-2011
Published: 2022-07-28
Description: Use after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop.html; https://crbug.com/1330379; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE: CVE-2022-2156
Published: 2022-07-28
Description: Use after free in Core in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html; https://crbug.com/1335458; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/
CVE: CVE-2022-2157
Published: 2022-07-28
Description: Use after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html; https://crbug.com/1327312; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/
CVE: CVE-2022-2158
Published: 2022-07-28
Description: Type confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html; https://crbug.com/1321078; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/
CVE: CVE-2022-2160
Published: 2022-07-28
Description: Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from a user's local files via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-362
References: https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html; https://crbug.com/1116450; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/
CVE: CVE-2022-2161
Published: 2022-07-28
Description: Use after free in WebApp Provider in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who convinced the user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html; https://crbug.com/1330289; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/
CVE: CVE-2022-2162
Published: 2022-07-28
Description: Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 103.0.5060.53 allowed a remote attacker to bypass file system access via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
References: https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html; https://crbug.com/1307930; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/
CVE: CVE-2022-2164
Published: 2022-07-28
Description: Inappropriate implementation in Extensions API in Google Chrome prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted HTML page.
CVSS Score: 6.3 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html; https://crbug.com/1268445; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/
CVE: CVE-2022-2165
Published: 2022-07-28
Description: Insufficient data validation in URL formatting in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVSS Score: 4.3 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html; https://crbug.com/1250993; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/
CVE: CVE-2022-2415
Published: 2022-07-28
Description: Heap buffer overflow in WebGL in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/167972/Chrome-WebGL-Uniform-Integer-Overflows.html; https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html; https://crbug.com/1316368
CVE: CVE-2022-36984
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger a denial of service attack against a NetBackup Primary server.
CVSS Score: 7.7 (HIGH)
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#h8; https://www.veritas.com/content/support/en_US/security/VTS22-004#h8
CVE: CVE-2022-36985
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with unprivileged local access to a Windows NetBackup Primary server could potentially escalate their privileges.
CVSS Score: 7.8 (HIGH)
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#h7; https://www.veritas.com/content/support/en_US/security/VTS22-004#h7
CVE: CVE-2022-36986
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with unauthenticated access could remotely execute arbitrary commands on a NetBackup Primary server.
CVSS Score: 8.6 (HIGH)
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#h3; https://www.veritas.com/content/support/en_US/security/VTS22-004#h3
CVE: CVE-2022-36987
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily write files to a NetBackup Primary server.
CVSS Score: 8.5 (HIGH)
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#h4; https://www.veritas.com/content/support/en_US/security/VTS22-004#h4
CVE: CVE-2022-36988
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup OpsCenter server, NetBackup Primary server, or NetBackup Media server could remotely execute arbitrary commands on a NetBackup Primary server or NetBackup Media server.
CVSS Score: 8.0 (HIGH)
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#h6; https://www.veritas.com/content/support/en_US/security/VTS22-004#h6
CVE: CVE-2022-36989
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server.
CVSS Score: 8.8 (HIGH)
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#h2; https://www.veritas.com/content/support/en_US/security/VTS22-004#h2
CVE: CVE-2022-36990
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely write arbitrary files to arbitrary locations from any Client to any other Client via a Primary server.
CVSS Score: 9.6 (CRITICAL)
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#c2; https://www.veritas.com/content/support/en_US/security/VTS22-004#c2
CVE: CVE-2022-36991
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily write content to a partially controlled path on a NetBackup Primary server.
CVSS Score: 8.1 (HIGH)
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#h5; https://www.veritas.com/content/support/en_US/security/VTS22-004#h5
CVE: CVE-2022-36992
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server (in specific notify conditions).
CVSS Score: 9.9 (CRITICAL)
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#c1; https://www.veritas.com/content/support/en_US/security/VTS22-004#c1
CVE: CVE-2022-36993
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server.
CVSS Score: 8.8 (HIGH)
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#h1; https://www.veritas.com/content/support/en_US/security/VTS22-004#h1
CVE: CVE-2022-36994
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily read files from a NetBackup Primary server.
CVSS Score: 6.3 (MEDIUM)
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#m4; https://www.veritas.com/content/support/en_US/security/VTS22-004#m4
CVE: CVE-2022-36995
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily create directories on a NetBackup Primary server.
CVSS Score: 4.3 (MEDIUM)
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#m5; https://www.veritas.com/content/support/en_US/security/VTS22-004#m5
CVE: CVE-2022-36996
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with access to a NetBackup Client could remotely gather information about any host known to a NetBackup Primary server.
CVSS Score: 4.3 (MEDIUM)
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#m6; https://www.veritas.com/content/support/en_US/security/VTS22-004#m6
CVE: CVE-2022-36997
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger impacts that include arbitrary file read, Server-Side Request Forgery (SSRF), and denial of service.
CVSS Score: 7.1 (HIGH)
CWE: CWE-918
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#h9; https://www.veritas.com/content/support/en_US/security/VTS22-004#h9
CVE: CVE-2022-36998
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger a stack-based buffer overflow on the NetBackup Primary server, resulting in a denial of service.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-787
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#m3; https://www.veritas.com/content/support/en_US/security/VTS22-004#m3
CVE: CVE-2022-36999
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Under certain conditions, an attacker with authenticated access to a NetBackup Client could remotely read files on a NetBackup Primary server.
CVSS Score: 6.5 (MEDIUM)
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#m2; https://www.veritas.com/content/support/en_US/security/VTS22-004#m2
CVE: CVE-2022-37000
Published: 2022-07-28
Description: An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Under certain conditions, an attacker with authenticated access to a NetBackup Client could remotely read files on a NetBackup Primary server.
CVSS Score: 6.5 (MEDIUM)
References: https://www.veritas.com/content/support/en_US/security/VTS22-004#m1; https://www.veritas.com/content/support/en_US/security/VTS22-004#m1
CVE: CVE-2022-2163
Published: 2022-07-28
Description: Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via UI interaction.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop_19.html; https://crbug.com/1308341; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/
CVE: CVE-2022-2294
Published: 2022-07-28
Description: Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://www.openwall.com/lists/oss-security/2022/07/28/2; https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html; https://crbug.com/1341043
CVE: CVE-2022-2295
Published: 2022-07-28
Description: Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html; https://crbug.com/1336869; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/
CVE: CVE-2022-2296
Published: 2022-07-28
Description: Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via direct UI interactions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html; https://crbug.com/1327087; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/
CVE: CVE-2022-2477
Published: 2022-07-28
Description: Use after free in Guest View in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop_19.html; https://crbug.com/1336266; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE: CVE-2022-2478
Published: 2022-07-28
Description: Use after free in PDF in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop_19.html; https://crbug.com/1335861; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE: CVE-2022-2479
Published: 2022-07-28
Description: Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious app to obtain potentially sensitive information from internal file directories via a crafted HTML page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop_19.html; https://crbug.com/1329987; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/