CVE-2022-22779low

CVE-2022-22779: fallo de gravedad baja en Zoom Video Communications Inc Keybase Client…

Retained exploded messages in Keybase clients for macOS and Windows

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Keybase Client

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 3.7epss 0.8%
The Keybase Clients for macOS and Windows before version 5.9.0 fails to properly remove exploded messages initiated by a user. This can occur if the receiving user switches to a non-chat feature and places the host in a sleep state before the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from a user’s filesystem.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Productos afectados
Zoom Video Communications Inc · Keybase Client for macOSZoom Video Communications Inc · Keybase Client for Windows
CVEs relacionadas — Zoom Video Communications Inc Keybase Client…

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-34422HIGHPath traversal of file names in Keybase Client for WindowsEPSS 1.4%CVE-2021-34426MEDIUMArbitrary command execution in Keybase Client for WindowsEPSS 0.2%