{"vulnerability": "cve-2022-2007", "sightings": [{"uuid": "67265e97-a377-4095-a7c3-2738a7e5f171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2007", "type": "seen", "source": "https://t.me/itsec_news/817", "content": "\u200b\u26a1\ufe0f \u041f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u044b \u043f\u043e\u043c\u043e\u0433\u043b\u0438 Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chrome.\n\n\ud83d\udcac \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome. \u041e\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 4 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u044b.\n\n\u2014 CVE-2022-2007 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 WebGPU. \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0414\u044d\u0432\u0438\u0434\u043e\u043c \u041c\u0430\u043d\u0443\u0447\u0435\u0445\u0440\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0430\u0433\u0440\u0430\u0434\u0443 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 $10 \u0442\u044b\u0441. \u0437\u0430 \u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b;\n\u2014 CVE-2022-2011 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 ANGLE (\u0434\u0432\u0438\u0436\u043e\u043a \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u043b\u043e\u044f Google Chrome). \u041e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b SeongHwan Park (SeHwa);\n\u2014 CVE-2022-2008 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 WebGL, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VinCSS \u0422\u0440\u0430\u043d \u0412\u0430\u043d \u041a\u0445\u0430\u043d\u0433;\n\u2014 CVE-2022-2010 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446. \u041e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u041c\u0430\u0440\u043a \u0411\u0440\u044d\u043d\u0434 \u0438\u0437 Google Project Zero . \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0435 Google, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u043d\u0430\u0433\u0440\u0430\u0434\u0443 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435.\n\nGoogle \u0435\u0449\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442 \u0441\u0443\u043c\u043c\u044b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c SeongHwan Park \u0438 \u0422\u0440\u0430\u043d \u0412\u0430\u043d \u041a\u0445\u0430\u043d\u0433\n\n\u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome 102.0.5005.115 \u0441\u0435\u0439\u0447\u0430\u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438. Google \u043d\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u043b \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u043d\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n#Google #Chrome #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2022-06-14T18:09:42.000000Z"}, {"uuid": "d71ba999-265d-49b5-a783-17b1b0e4423d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20071", "type": "seen", "source": "https://t.me/cibsecurity/40501", "content": "\u203c CVE-2022-20071 \u203c\n\nIn ccu, there is a possible escalation of privilege due to a missing certificate validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS06183315; Issue ID: ALPS06183315.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-12T00:16:11.000000Z"}, {"uuid": "69fbcee7-3fd6-426e-a2b3-84b232561a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20074", "type": "seen", "source": "https://t.me/cibsecurity/40502", "content": "\u203c CVE-2022-20074 \u203c\n\nIn preloader (partition), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06183301; Issue ID: ALPS06183301.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-12T00:16:13.000000Z"}, {"uuid": "b1d2768e-250a-4834-a57e-a1aa990a2a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20073", "type": "seen", "source": "https://t.me/cibsecurity/40517", "content": "\u203c CVE-2022-20073 \u203c\n\nIn preloader (usb), there is a possible out of bounds write due to a integer underflow. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160841; Issue ID: ALPS06160841.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-12T00:16:32.000000Z"}, {"uuid": "e639c5ec-0a61-4040-a844-1c81e87ccf2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20070", "type": "seen", "source": "https://t.me/cibsecurity/40512", "content": "\u203c CVE-2022-20070 \u203c\n\nIn ssmr, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS06362920; Issue ID: ALPS06362920.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-12T00:16:26.000000Z"}, {"uuid": "552b185c-e7c1-48d8-8fba-ed65272212b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2007", "type": "seen", "source": "https://t.me/EchelonEyes/354", "content": "Google Chrome \u0437\u0430\u043f\u043b\u0430\u0442\u0438\u0442 $10 000 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u0448\u0438\u043b\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0434\u043e \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Chrome (102.0.5005.115). \u0412 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b 4 \u0438\u0437 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u043c\u0435\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438:\n\nCVE-2022-2007: use after free \u0432 WebGPU.\nCVE-2022-2008: out of bounds memory access \u0432 WebGL.\nCVE-2022-2010: Out of bounds read \u0432 compositing.\nCVE-2022-2011: Use after free \u0432 ANGLE (\u0434\u0432\u0438\u0436\u043e\u043a \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u043b\u043e\u044f Google Chrome).\n\n\u0412\u0441\u0435 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442 \u043e\u0442 Google \u0434\u0435\u043d\u0435\u0436\u043d\u043e\u0435 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0414\u044d\u0432\u0438\u0434 \u041c\u0430\u043d\u0443\u0447\u0435\u0445\u0440\u0438, \u0432\u044b\u044f\u0432\u0438\u0432\u0448\u0435\u043c\u0443 CVE-2022-2007, \u0443\u0436\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0430 \u043d\u0430\u0433\u0440\u0430\u0434\u0430 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 10 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://chromereleases.googleblog.com/search/label/Stable%20updates \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Chrome", "creation_timestamp": "2026-07-17T05:00:04.244621Z"}, {"uuid": "e355bd42-6a53-47dc-9a98-642fcbb73e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2007", "type": "seen", "source": "https://t.me/EchelonEyes/354", "content": "Google Chrome \u0437\u0430\u043f\u043b\u0430\u0442\u0438\u0442 $10 000 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0443 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u0448\u0438\u043b\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0434\u043e \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Chrome (102.0.5005.115). \u0412 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b 4 \u0438\u0437 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u043c\u0435\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438:\n\nCVE-2022-2007: use after free \u0432 WebGPU.\nCVE-2022-2008: out of bounds memory access \u0432 WebGL.\nCVE-2022-2010: Out of bounds read \u0432 compositing.\nCVE-2022-2011: Use after free \u0432 ANGLE (\u0434\u0432\u0438\u0436\u043e\u043a \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u043b\u043e\u044f Google Chrome).\n\n\u0412\u0441\u0435 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442 \u043e\u0442 Google \u0434\u0435\u043d\u0435\u0436\u043d\u043e\u0435 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0414\u044d\u0432\u0438\u0434 \u041c\u0430\u043d\u0443\u0447\u0435\u0445\u0440\u0438, \u0432\u044b\u044f\u0432\u0438\u0432\u0448\u0435\u043c\u0443 CVE-2022-2007, \u0443\u0436\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0430 \u043d\u0430\u0433\u0440\u0430\u0434\u0430 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 10 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://chromereleases.googleblog.com/search/label/Stable%20updates \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Chrome", "creation_timestamp": "2026-07-18T00:00:40.009389Z"}, {"uuid": "8d84cd70-8cf8-466d-af1d-78c327eb83b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2007", "type": "seen", "source": "https://t.me/cissp/5948", "content": "Dear Friends,\nPlease be informed that Microsoft's June 2022 Security updates have been released, and this month\u2019s release provides fixes for 55 vulnerabilities, including fixes for the Windows MSDT 'Follina' zero-day vulnerability and new Intel MMIO flaws.\nOf the total patches introduced\u00a0today, three are classified as 'Critical' as they allow remote code execution (RC), with the rest classified as Important.\nBelow is a list of critical vulnerabilities that have been fixed in this month\u2019s release.\nCVE-2022-30136 | Windows Network File System Remote Code Execution (RCE) Vulnerability\n\nCVE-2022-30158 | Microsoft SharePoint Server Remote Code Execution (RCE) Vulnerability\n\nCVE-2022-30163 | Windows Hyper-V Remote Code Execution (RCE) Vulnerability\nFor more information about this month\u2019s advisory, please refer to the following\nhttps://lnkd.in/eBy3f3Re\nOther vendors advisories\n\n================\nAtlassian\nAtlassian has released security updates to address a critical zero-day vulnerability in Confluence Server and Data Centre actively exploited in the wild to backdoor Internet-exposed servers. The zero-day (CVE-2022-26134) affects all supported versions of Confluence Server and Data Centre and allows unauthenticated attackers to gain remote code execution on unpatched servers.\nFor more information, please refer to this article\nhttps://lnkd.in/ek6vKfQm\n\nGoogle\nGoogle released an update for Google Chrome, The Stable channel has been updated to 102.0.5005.115 for Windows, Mac, and Linux which will roll out over the coming days/weeks.\nThis update includes 7 security fixes. Below, we highlight fixes that were contributed by external researchers, one of the fixed bugs was tracked as CVE-2022-2007 and ranked as High, the researcher who reported this bug got 10,000$ as a bounty by reporting this bug.\n\nRedhat\nRedhat released a set of security updates that address solutions for many flaws that ranked as high and medium, for a complete list of addressed vulnerabilities and their related advisories, Please refer to this\u00a0link\n\nOracle\nOracle recently released the following security and patch update advisories, we are following and keep you updated when oracle releases its mega security patches next July.\nhttps://lnkd.in/ehPBvZZ6\n\nhttps://lnkd.in/ewcFuGqi\n\n\nFollow your normal patch management process, and test the patches before being applied to production according to change management", "creation_timestamp": "2026-09-01T17:00:28.455880Z"}, {"uuid": "ba34455e-c7e3-4bf7-973d-8e8b2858b8fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2007", "type": "seen", "source": "https://t.me/cissp/5948", "content": "Dear Friends,\nPlease be informed that Microsoft's June 2022 Security updates have been released, and this month\u2019s release provides fixes for 55 vulnerabilities, including fixes for the Windows MSDT 'Follina' zero-day vulnerability and new Intel MMIO flaws.\nOf the total patches introduced\u00a0today, three are classified as 'Critical' as they allow remote code execution (RC), with the rest classified as Important.\nBelow is a list of critical vulnerabilities that have been fixed in this month\u2019s release.\nCVE-2022-30136 | Windows Network File System Remote Code Execution (RCE) Vulnerability\n\nCVE-2022-30158 | Microsoft SharePoint Server Remote Code Execution (RCE) Vulnerability\n\nCVE-2022-30163 | Windows Hyper-V Remote Code Execution (RCE) Vulnerability\nFor more information about this month\u2019s advisory, please refer to the following\nhttps://lnkd.in/eBy3f3Re\nOther vendors advisories\n\n================\nAtlassian\nAtlassian has released security updates to address a critical zero-day vulnerability in Confluence Server and Data Centre actively exploited in the wild to backdoor Internet-exposed servers. The zero-day (CVE-2022-26134) affects all supported versions of Confluence Server and Data Centre and allows unauthenticated attackers to gain remote code execution on unpatched servers.\nFor more information, please refer to this article\nhttps://lnkd.in/ek6vKfQm\n\nGoogle\nGoogle released an update for Google Chrome, The Stable channel has been updated to 102.0.5005.115 for Windows, Mac, and Linux which will roll out over the coming days/weeks.\nThis update includes 7 security fixes. Below, we highlight fixes that were contributed by external researchers, one of the fixed bugs was tracked as CVE-2022-2007 and ranked as High, the researcher who reported this bug got 10,000$ as a bounty by reporting this bug.\n\nRedhat\nRedhat released a set of security updates that address solutions for many flaws that ranked as high and medium, for a complete list of addressed vulnerabilities and their related advisories, Please refer to this\u00a0link\n\nOracle\nOracle recently released the following security and patch update advisories, we are following and keep you updated when oracle releases its mega security patches next July.\nhttps://lnkd.in/ehPBvZZ6\n\nhttps://lnkd.in/ewcFuGqi\n\n\nFollow your normal patch management process, and test the patches before being applied to production according to change management", "creation_timestamp": "2026-09-02T01:04:10.938401Z"}, {"uuid": "4b9ebff8-fbf3-43f2-a93d-ee586e3f9450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2007", "type": "seen", "source": "https://t.me/cissp/5948", "content": "Dear Friends,\nPlease be informed that Microsoft's June 2022 Security updates have been released, and this month\u2019s release provides fixes for 55 vulnerabilities, including fixes for the Windows MSDT 'Follina' zero-day vulnerability and new Intel MMIO flaws.\nOf the total patches introduced\u00a0today, three are classified as 'Critical' as they allow remote code execution (RC), with the rest classified as Important.\nBelow is a list of critical vulnerabilities that have been fixed in this month\u2019s release.\nCVE-2022-30136 | Windows Network File System Remote Code Execution (RCE) Vulnerability\n\nCVE-2022-30158 | Microsoft SharePoint Server Remote Code Execution (RCE) Vulnerability\n\nCVE-2022-30163 | Windows Hyper-V Remote Code Execution (RCE) Vulnerability\nFor more information about this month\u2019s advisory, please refer to the following\nhttps://lnkd.in/eBy3f3Re\nOther vendors advisories\n\n================\nAtlassian\nAtlassian has released security updates to address a critical zero-day vulnerability in Confluence Server and Data Centre actively exploited in the wild to backdoor Internet-exposed servers. The zero-day (CVE-2022-26134) affects all supported versions of Confluence Server and Data Centre and allows unauthenticated attackers to gain remote code execution on unpatched servers.\nFor more information, please refer to this article\nhttps://lnkd.in/ek6vKfQm\n\nGoogle\nGoogle released an update for Google Chrome, The Stable channel has been updated to 102.0.5005.115 for Windows, Mac, and Linux which will roll out over the coming days/weeks.\nThis update includes 7 security fixes. Below, we highlight fixes that were contributed by external researchers, one of the fixed bugs was tracked as CVE-2022-2007 and ranked as High, the researcher who reported this bug got 10,000$ as a bounty by reporting this bug.\n\nRedhat\nRedhat released a set of security updates that address solutions for many flaws that ranked as high and medium, for a complete list of addressed vulnerabilities and their related advisories, Please refer to this\u00a0link\n\nOracle\nOracle recently released the following security and patch update advisories, we are following and keep you updated when oracle releases its mega security patches next July.\nhttps://lnkd.in/ehPBvZZ6\n\nhttps://lnkd.in/ewcFuGqi\n\n\nFollow your normal patch management process, and test the patches before being applied to production according to change management", "creation_timestamp": "2026-09-10T08:00:05.620492Z"}, {"uuid": "2a19d8d4-8bde-462b-a958-a085f438c269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2007", "type": "seen", "source": "https://t.me/cissp/5948", "content": "Dear Friends,\nPlease be informed that Microsoft's June 2022 Security updates have been released, and this month\u2019s release provides fixes for 55 vulnerabilities, including fixes for the Windows MSDT 'Follina' zero-day vulnerability and new Intel MMIO flaws.\nOf the total patches introduced\u00a0today, three are classified as 'Critical' as they allow remote code execution (RC), with the rest classified as Important.\nBelow is a list of critical vulnerabilities that have been fixed in this month\u2019s release.\nCVE-2022-30136 | Windows Network File System Remote Code Execution (RCE) Vulnerability\n\nCVE-2022-30158 | Microsoft SharePoint Server Remote Code Execution (RCE) Vulnerability\n\nCVE-2022-30163 | Windows Hyper-V Remote Code Execution (RCE) Vulnerability\nFor more information about this month\u2019s advisory, please refer to the following\nhttps://lnkd.in/eBy3f3Re\nOther vendors advisories\n\n================\nAtlassian\nAtlassian has released security updates to address a critical zero-day vulnerability in Confluence Server and Data Centre actively exploited in the wild to backdoor Internet-exposed servers. The zero-day (CVE-2022-26134) affects all supported versions of Confluence Server and Data Centre and allows unauthenticated attackers to gain remote code execution on unpatched servers.\nFor more information, please refer to this article\nhttps://lnkd.in/ek6vKfQm\n\nGoogle\nGoogle released an update for Google Chrome, The Stable channel has been updated to 102.0.5005.115 for Windows, Mac, and Linux which will roll out over the coming days/weeks.\nThis update includes 7 security fixes. Below, we highlight fixes that were contributed by external researchers, one of the fixed bugs was tracked as CVE-2022-2007 and ranked as High, the researcher who reported this bug got 10,000$ as a bounty by reporting this bug.\n\nRedhat\nRedhat released a set of security updates that address solutions for many flaws that ranked as high and medium, for a complete list of addressed vulnerabilities and their related advisories, Please refer to this\u00a0link\n\nOracle\nOracle recently released the following security and patch update advisories, we are following and keep you updated when oracle releases its mega security patches next July.\nhttps://lnkd.in/ehPBvZZ6\n\nhttps://lnkd.in/ewcFuGqi\n\n\nFollow your normal patch management process, and test the patches before being applied to production according to change management", "creation_timestamp": "2026-09-11T00:00:47.271460Z"}]}