deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-26728
Published: 2022-05-26
Description: This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to access restricted files.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213255; https://support.apple.com/en-us/HT213256; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26731
Published: 2022-05-26
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious website may be able to track users in Safari private browsing mode.
CVSS Score: 4.3 (MEDIUM)
References: https://support.apple.com/en-us/HT213257; https://support.apple.com/en-us/HT213258; https://support.apple.com/kb/HT213256
CVE: CVE-2022-26736
Published: 2022-05-26
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213254; https://support.apple.com/en-us/HT213257; https://support.apple.com/en-us/HT213258
CVE: CVE-2022-26737
Published: 2022-05-26
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213254; https://support.apple.com/en-us/HT213257; https://support.apple.com/en-us/HT213258
CVE: CVE-2022-26738
Published: 2022-05-26
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213254; https://support.apple.com/en-us/HT213257; https://support.apple.com/en-us/HT213258
CVE: CVE-2021-28508
Published: 2022-05-26
Description: This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak IPsec sensitive data in clear text in CVP to other authorized users, which could cause IPsec traffic to be decrypted or modified by other authorized users on the device.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-255, CWE-319
References: https://www.arista.com/en/support/advisories-notices/security-advisories/15484-security-advisory-0077; https://www.arista.com/en/support/advisories-notices/security-advisories/15484-security-advisory-0077
CVE: CVE-2021-28509
Published: 2022-05-26
Description: This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak MACsec sensitive data in clear text in CVP to other authorized users, which could cause MACsec traffic to be decrypted or modified by other authorized users on the device.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-255, CWE-319
References: https://www.arista.com/en/support/advisories-notices/security-advisories/15484-security-advisory-0077; https://www.arista.com/en/support/advisories-notices/security-advisories/15484-security-advisory-0077
CVE: CVE-2022-26739
Published: 2022-05-26
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213254; https://support.apple.com/en-us/HT213257; https://support.apple.com/en-us/HT213258
CVE: CVE-2022-26740
Published: 2022-05-26
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213254; https://support.apple.com/en-us/HT213257; https://support.apple.com/en-us/HT213258
CVE: CVE-2022-26741
Published: 2022-05-26
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT213257; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26742
Published: 2022-05-26
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT213257; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26743
Published: 2022-05-26
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.4. An attacker that has already achieved code execution in macOS Recovery may be able to escalate to kernel privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213257; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26744
Published: 2022-05-26
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2022/Oct/39; https://support.apple.com/en-us/HT213258; https://support.apple.com/kb/HT213446
CVE: CVE-2022-26745
Published: 2022-05-26
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.6.6. A malicious application may disclose restricted memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213256; https://support.apple.com/en-us/HT213256
CVE: CVE-2022-26746
Published: 2022-05-26
Description: This issue was addressed by removing the vulnerable code. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213255; https://support.apple.com/en-us/HT213256; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26747
Published: 2022-05-26
Description: This issue was addressed with improved checks. This issue is fixed in Xcode 13.4. An app may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213261; https://support.apple.com/en-us/HT213261
CVE: CVE-2022-26748
Published: 2022-05-26
Description: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213255; https://support.apple.com/en-us/HT213256; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26749
Published: 2022-05-26
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT213257; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26750
Published: 2022-05-26
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT213257; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26751
Published: 2022-05-26
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213255; https://support.apple.com/en-us/HT213256; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26752
Published: 2022-05-26
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT213257; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26753
Published: 2022-05-26
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT213257; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26754
Published: 2022-05-26
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT213257; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26755
Published: 2022-05-26
Description: This issue was addressed with improved environment sanitization. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to break out of its sandbox.
CVSS Score: 6.3 (MEDIUM)
References: https://support.apple.com/en-us/HT213255; https://support.apple.com/en-us/HT213256; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26756
Published: 2022-05-26
Description: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213255; https://support.apple.com/en-us/HT213256; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26757
Published: 2022-05-26
Description: A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://packetstormsecurity.com/files/167517/XNU-Flow-Divert-Race-Condition-Use-After-Free.html; https://support.apple.com/en-us/HT213253; https://support.apple.com/en-us/HT213254
CVE: CVE-2022-26761
Published: 2022-05-26
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213255; https://support.apple.com/en-us/HT213256; https://support.apple.com/en-us/HT213255
CVE: CVE-2022-26763
Published: 2022-05-26
Description: An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://support.apple.com/en-us/HT213253; https://support.apple.com/en-us/HT213254; https://support.apple.com/en-us/HT213255
CVE: CVE-2022-26764
Published: 2022-05-26
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213253; https://support.apple.com/en-us/HT213254; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26765
Published: 2022-05-26
Description: A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://support.apple.com/en-us/HT213253; https://support.apple.com/en-us/HT213254; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26766
Published: 2022-05-26
Description: A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious app may be able to bypass signature validation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://support.apple.com/en-us/HT213253; https://support.apple.com/en-us/HT213254; https://support.apple.com/en-us/HT213255
CVE: CVE-2022-26767
Published: 2022-05-26
Description: The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://support.apple.com/en-us/HT213256; https://support.apple.com/en-us/HT213257; https://support.apple.com/en-us/HT213256
CVE: CVE-2022-26768
Published: 2022-05-26
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, watchOS 8.6, tvOS 15.5, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://seclists.org/fulldisclosure/2022/Jul/12; https://support.apple.com/en-us/HT213253; https://support.apple.com/en-us/HT213254
CVE: CVE-2022-26769
Published: 2022-05-26
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213255; https://support.apple.com/en-us/HT213256; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26770
Published: 2022-05-26
Description: An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213255; https://support.apple.com/en-us/HT213256; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26771
Published: 2022-05-26
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.6, tvOS 15.5, iOS 15.5 and iPadOS 15.5. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213253; https://support.apple.com/en-us/HT213254; https://support.apple.com/en-us/HT213258
CVE: CVE-2022-26772
Published: 2022-05-26
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-119
References: https://support.apple.com/en-us/HT213257; https://support.apple.com/en-us/HT213257
CVE: CVE-2022-26773
Published: 2022-05-26
Description: A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have permission.
CVSS Score: 7.1 (HIGH)
CWE: CWE-285
References: https://support.apple.com/en-us/HT213259; https://support.apple.com/en-us/HT213259
CVE: CVE-2022-26774
Published: 2022-05-26
Description: A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://support.apple.com/en-us/HT213259; https://support.apple.com/en-us/HT213259
CVE: CVE-2022-26775
Published: 2022-05-26
Description: An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An attacker may be able to cause unexpected application termination or arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-190
References: https://support.apple.com/en-us/HT213255; https://support.apple.com/en-us/HT213257; https://support.apple.com/kb/HT213253
CVE: CVE-2022-26776
Published: 2022-05-26
Description: This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to cause unexpected application termination or arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://support.apple.com/en-us/HT213256; https://support.apple.com/en-us/HT213257; https://support.apple.com/kb/HT213253
CVE: CVE-2022-29632
Published: 2022-05-26
Description: An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attackers to execute arbitrary code via a crafted file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/roncoo/roncoo-education/issues/16; https://github.com/roncoo/roncoo-education/issues/16
CVE: CVE-2022-29633
Published: 2022-05-26
Description: An access control issue in Linglong v1.0 allows attackers to access the background of the application via a crafted cookie.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/awake1t/linglong; https://github.com/awake1t/linglong
CVE: CVE-2022-29637
Published: 2022-05-26
Description: An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: https://github.com/mindoc-org/mindoc/issues/788; https://github.com/mindoc-org/mindoc/issues/788
CVE: CVE-2022-30584
Published: 2022-05-26
Description: Archer Platform 6.3 before 6.11 (6.11.0.0) contains an Improper Access Control Vulnerability within SSO ADFS functionality that could potentially be exploited by malicious users to compromise the affected system. 6.10 P3 (6.10.0.3) and 6.9 SP3 P4 (6.9.3.4) are also fixed releases.
CVSS Score: 9.6 (CRITICAL)
References: https://www.archerirm.community/t5/releases/tkb-p/releases; https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/677341; https://www.archerirm.community/t5/releases/tkb-p/releases
CVE: CVE-2022-30585
Published: 2022-05-26
Description: The REST API in Archer Platform 6.x before 6.11 (6.11.0.0) contains an Authorization Bypass Vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to view sensitive information. 6.10 P3 (6.10.0.3) and 6.9 SP3 P4 (6.9.3.4) are also fixed releases.
CVSS Score: 6.5 (MEDIUM)
References: https://www.archerirm.community/t5/releases/tkb-p/releases; https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/677341; https://www.archerirm.community/t5/releases/tkb-p/releases
CVE: CVE-2022-31648
Published: 2022-05-26
Description: Talend Administration Center is vulnerable to a reflected Cross-Site Scripting (XSS) issue in the SSO login endpoint. The issue is fixed for versions 8.0.x in TPS-5233, for versions 7.3.x in TPS-5324, and for versions 7.2.x in TPS-5235. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://talend.com; https://www.talend.com/security/incident-response/#CVE-2022-31648; https://talend.com
CVE: CVE-2022-28394
Published: 2022-05-27
Description: EOL Product CVE - Installer of Trend Micro Password Manager (Consumer) versions 3.7.0.1223 and below provided by Trend Micro Incorporated contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427). Please note that this was reported on an EOL version of the product, and users are advised to upgrade to the latest supported version (5.x).
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10977; https://jvn.jp/en/jp/JVN60037444/; https://jvn.jp/jp/JVN60037444/
CVE: CVE-2022-30687
Published: 2022-05-27
Description: Trend Micro Maximum Security 2022 is vulnerable to a link following vulnerability that could allow a low privileged local user to manipulate the product's secure erase feature to delete arbitrary files.
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://helpcenter.trendmicro.com/en-us/article/tmka-11017; https://www.zerodayinitiative.com/advisories/ZDI-22-789/; https://helpcenter.trendmicro.com/en-us/article/tmka-11017
CVE: CVE-2022-30700
Published: 2022-05-27
Description: An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to load a DLL with escalated privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://success.trendmicro.com/solution/000291008; https://www.zerodayinitiative.com/advisories/ZDI-22-790/; https://success.trendmicro.com/solution/000291008
CVE: CVE-2022-30701
Published: 2022-05-27
Description: An uncontrolled search path element vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to craft a special configuration file to load an untrusted library with escalated privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://success.trendmicro.com/solution/000291008; https://www.zerodayinitiative.com/advisories/ZDI-22-797/; https://success.trendmicro.com/solution/000291008
CVE: CVE-2022-1898
Published: 2022-05-27
Description: Use After Free in GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; https://github.com/vim/vim/commit/e2fa213cf571041dbd04ab0329303ffdc980678a