Vulnerability-Lookup

CVE-2022-4185 (GCVE-0-2022-4185)

Vulnerability from cvelistv5 – Published: 2022-11-29 00:00 – Updated: 2024-08-03 01:34

Summary

Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to spoof the contents of the modal dialogue via a crafted HTML page. (Chromium security severity: Medium)

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CWE

Inappropriate implementation

Assigner

Chrome Google root

References

4 references

URL	Tags
https://chromereleases.googleblog.com/2022/11/sta…
https://crbug.com/1373025
https://security.gentoo.org/glsa/202305-10	vendor-advisory
https://security.gentoo.org/glsa/202311-11	vendor-advisory

Impacted products

1 product

Vendor	Product	Version	CPE status
Google	Chrome	Affected: unspecified , < 108.0.5359.71 (custom)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T01:34:49.304Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://crbug.com/1373025"
          },
          {
            "name": "GLSA-202305-10",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-10"
          },
          {
            "name": "GLSA-202311-11",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202311-11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "108.0.5359.71",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to spoof the contents of the modal dialogue via a crafted HTML page. (Chromium security severity: Medium)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Inappropriate implementation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-25T11:06:14.859Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html"
        },
        {
          "url": "https://crbug.com/1373025"
        },
        {
          "name": "GLSA-202305-10",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202305-10"
        },
        {
          "name": "GLSA-202311-11",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202311-11"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2022-4185",
    "datePublished": "2022-11-29T00:00:00.000Z",
    "dateReserved": "2022-11-29T00:00:00.000Z",
    "dateUpdated": "2024-08-03T01:34:49.304Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-4185",
      "date": "2026-09-16",
      "epss": "0.00773",
      "percentile": "0.53962"
    },
    "fkie_nvd": {
      "configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"108.0.5359.71\", \"matchCriteriaId\": \"540AD23D-514E-4CDA-BD61-63F304A65613\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B5415705-33E5-46D5-8E4D-9EBADC8C5705\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to spoof the contents of the modal dialogue via a crafted HTML page. (Chromium security severity: Medium)\"}, {\"lang\": \"es\", \"value\": \"La implementaci\\u00f3n inapropiada en Navegaci\\u00f3n en Google Chrome en iOS anterior a la versi\\u00f3n 108.0.5359.71 permiti\\u00f3 a un atacante remoto falsificar el contenido del di\\u00e1logo modal a trav\\u00e9s de una p\\u00e1gina HTML manipulada. (Severidad de seguridad de Chromium: Media)\"}]",
      "id": "CVE-2022-4185",
      "lastModified": "2024-11-21T07:34:44.407",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N\", \"baseScore\": 4.3, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 1.4}]}",
      "published": "2022-11-30T00:15:10.570",
      "references": "[{\"url\": \"https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"https://crbug.com/1373025\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Issue Tracking\", \"Permissions Required\"]}, {\"url\": \"https://security.gentoo.org/glsa/202305-10\", \"source\": \"chrome-cve-admin@google.com\"}, {\"url\": \"https://security.gentoo.org/glsa/202311-11\", \"source\": \"chrome-cve-admin@google.com\"}, {\"url\": \"https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"https://crbug.com/1373025\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Permissions Required\"]}, {\"url\": \"https://security.gentoo.org/glsa/202305-10\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://security.gentoo.org/glsa/202311-11\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "chrome-cve-admin@google.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-4185\",\"sourceIdentifier\":\"chrome-cve-admin@google.com\",\"published\":\"2022-11-30T00:15:10.570\",\"lastModified\":\"2026-06-17T05:20:11.717\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to spoof the contents of the modal dialogue via a crafted HTML page. (Chromium security severity: Medium)\"},{\"lang\":\"es\",\"value\":\"La implementaci\u00f3n inapropiada en Navegaci\u00f3n en Google Chrome en iOS anterior a la versi\u00f3n 108.0.5359.71 permiti\u00f3 a un atacante remoto falsificar el contenido del di\u00e1logo modal a trav\u00e9s de una p\u00e1gina HTML manipulada. (Severidad de seguridad de Chromium: Media)\"}],\"affected\":[{\"source\":\"chrome-cve-admin@google.com\",\"affectedData\":[{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"unspecified\",\"lessThan\":\"108.0.5359.71\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"108.0.5359.71\",\"matchCriteriaId\":\"540AD23D-514E-4CDA-BD61-63F304A65613\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5415705-33E5-46D5-8E4D-9EBADC8C5705\"}]}]}],\"references\":[{\"url\":\"https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://crbug.com/1373025\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Issue Tracking\",\"Permissions Required\"]},{\"url\":\"https://security.gentoo.org/glsa/202305-10\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://security.gentoo.org/glsa/202311-11\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://crbug.com/1373025\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Permissions Required\"]},{\"url\":\"https://security.gentoo.org/glsa/202305-10\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/202311-11\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "current_release_date": "2025-11-21T15:47:57+00:00",
      "cve": "CVE-2022-4185",
      "id": "CVE-2022-4185",
      "initial_release_date": "2022-11-29T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "chromium-browser: Inappropriate implementation in Navigation",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4185.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2025-03-15T07:55:40Z",
      "cve": "CVE-2022-4185",
      "id": "CVE-2022-4185",
      "initial_release_date": "2023-02-15T03:30:36Z",
      "product_status:recommended": "12",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2022-4185",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-4185.json",
      "version": "6"
    }
  }
}

OPENSUSE-SU-2024:12545-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00

Summary

chromedriver-108.0.5359.71-1.1 on GA media

Severity

Moderate

Scope

22 vulnerabilities in this advisory, including CVE-2022-4185.

CVE-2022-4185

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Recommended: 8 products

Open the full advisory

OPENSUSE-SU-2024:12948-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00

Summary

ungoogled-chromium-113.0.5672.92-1.1 on GA media

Severity

Moderate

Scope

2310 vulnerabilities in this advisory, including CVE-2022-4185.

CVE-2022-4185

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Recommended: 8 products

Open the full advisory

ubuntu-cve-2022-4185

Vulnerability from osv_ubuntu

Published

2022-11-30 00:15

Modified

2025-09-08 16:49

Summary

Details

Severity

4.3 (Medium)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2022-4185	REPORT
	https://chromereleases.googleblog.com/2022/11/sta…	REPORT
	https://crbug.com/1373025	REPORT
	https://www.cve.org/CVERecord?id=CVE-2022-4185	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "chromium-browser",
            "binary_version": "108.0.5359.71-0ubuntu0.18.04.5"
          },
          {
            "binary_name": "chromium-browser-l10n",
            "binary_version": "108.0.5359.71-0ubuntu0.18.04.5"
          },
          {
            "binary_name": "chromium-chromedriver",
            "binary_version": "108.0.5359.71-0ubuntu0.18.04.5"
          },
          {
            "binary_name": "chromium-codecs-ffmpeg",
            "binary_version": "108.0.5359.71-0ubuntu0.18.04.5"
          },
          {
            "binary_name": "chromium-codecs-ffmpeg-extra",
            "binary_version": "108.0.5359.71-0ubuntu0.18.04.5"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "chromium-browser",
        "purl": "pkg:deb/ubuntu/chromium-browser@108.0.5359.71-0ubuntu0.18.04.5?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "108.0.5359.71-0ubuntu0.18.04.5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "61.0.3163.100-0ubuntu1.1378",
        "62.0.3202.62-0ubuntu0.17.10.1380",
        "62.0.3202.89-0ubuntu1.1386",
        "62.0.3202.94-0ubuntu1.1388",
        "63.0.3239.84-0ubuntu1",
        "63.0.3239.108-0ubuntu1",
        "64.0.3282.119-0ubuntu1",
        "64.0.3282.140-0ubuntu1",
        "64.0.3282.167-0ubuntu1",
        "65.0.3325.146-0ubuntu1",
        "65.0.3325.181-0ubuntu1",
        "66.0.3359.139-0ubuntu0.18.04.3",
        "66.0.3359.181-0ubuntu0.18.04.1",
        "67.0.3396.99-0ubuntu0.18.04.1",
        "68.0.3440.75-0ubuntu0.18.04.1",
        "68.0.3440.106-0ubuntu0.18.04.1",
        "69.0.3497.81-0ubuntu0.18.04.1",
        "70.0.3538.67-0ubuntu0.18.04.1",
        "70.0.3538.77-0ubuntu0.18.04.1",
        "70.0.3538.110-0ubuntu0.18.04.1",
        "71.0.3578.80-0ubuntu0.18.04.1",
        "71.0.3578.98-0ubuntu0.18.04.1",
        "72.0.3626.119-0ubuntu0.18.04.1",
        "72.0.3626.121-0ubuntu0.18.04.1",
        "73.0.3683.75-0ubuntu0.18.04.1",
        "73.0.3683.86-0ubuntu0.18.04.1",
        "74.0.3729.169-0ubuntu0.18.04.1",
        "75.0.3770.90-0ubuntu0.18.04.1",
        "75.0.3770.142-0ubuntu0.18.04.1",
        "76.0.3809.87-0ubuntu0.18.04.1",
        "76.0.3809.100-0ubuntu0.18.04.1",
        "77.0.3865.90-0ubuntu0.18.04.1",
        "78.0.3904.70-0ubuntu0.18.04.2",
        "78.0.3904.97-0ubuntu0.18.04.1",
        "78.0.3904.108-0ubuntu0.18.04.1",
        "79.0.3945.79-0ubuntu0.18.04.1",
        "79.0.3945.130-0ubuntu0.18.04.1",
        "80.0.3987.87-0ubuntu0.18.04.1",
        "80.0.3987.149-0ubuntu0.18.04.1",
        "80.0.3987.163-0ubuntu0.18.04.1",
        "81.0.4044.122-0ubuntu0.18.04.1",
        "81.0.4044.138-0ubuntu0.18.04.1",
        "83.0.4103.61-0ubuntu0.18.04.1",
        "84.0.4147.105-0ubuntu0.18.04.1",
        "85.0.4183.83-0ubuntu0.18.04.2",
        "85.0.4183.121-0ubuntu0.18.04.1",
        "86.0.4240.75-0ubuntu0.18.04.1",
        "86.0.4240.198-0ubuntu0.18.04.1",
        "87.0.4280.66-0ubuntu0.18.04.1",
        "89.0.4389.82-0ubuntu0.18.04.1",
        "89.0.4389.90-0ubuntu0.18.04.2",
        "90.0.4430.72-0ubuntu0.18.04.1",
        "90.0.4430.93-0ubuntu0.18.04.1",
        "91.0.4472.77-0ubuntu0.18.04.1",
        "91.0.4472.101-0ubuntu0.18.04.1",
        "92.0.4515.159-0ubuntu0.18.04.1",
        "93.0.4577.63-0ubuntu0.18.04.1",
        "94.0.4606.71-0ubuntu0.18.04.1",
        "94.0.4606.81-0ubuntu0.18.04.1",
        "95.0.4638.69-0ubuntu0.18.04.1",
        "97.0.4692.71-0ubuntu0.18.04.1",
        "99.0.4844.51-0ubuntu0.18.04.1",
        "99.0.4844.84-0ubuntu0.18.04.1",
        "100.0.4896.127-0ubuntu0.18.04.1",
        "101.0.4951.64-0ubuntu0.18.04.1",
        "103.0.5060.134-0ubuntu0.18.04.1",
        "104.0.5112.101-0ubuntu0.18.04.1",
        "105.0.5195.102-0ubuntu0.18.04.1",
        "107.0.5304.87-0ubuntu11.18.04.1"
      ]
    }
  ],
  "aliases": [],
  "details": "Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to spoof the contents of the modal dialogue via a crafted HTML page. (Chromium security severity: Medium)",
  "id": "UBUNTU-CVE-2022-4185",
  "modified": "2025-09-08T16:49:51Z",
  "published": "2022-11-30T00:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-4185"
    },
    {
      "type": "REPORT",
      "url": "https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_29.html"
    },
    {
      "type": "REPORT",
      "url": "https://crbug.com/1373025"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-4185"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2022-4185"
  ]
}

WID-SEC-W-2022-2202

Vulnerability from csaf_certbund - Published: 2022-11-29 23:00 - Updated: 2023-12-21 23:00

Summary

Google Chrome: Mehrere Schwachstellen

Severity

Hoch

Scope

23 vulnerabilities in this advisory, including CVE-2022-4185.

CVE-2022-4185

In Google Chrome und Microsoft Edge existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund einer Typverwechslung, mehrerer Use-after-free-Fehler, eines Out-of-Bounds-Write, mehrerer ungeeigneter Implementierungen, mehrerer unzureichender Validierungen von nicht vertrauenswürdigen Eingaben und mehrerer unzureichender Durchsetzung von Richtlinien in den Komponenten V8, Camera Capture, Lacros Graphics, Extensions, Mojo, Audio, Forms, Fenced Frames, Popup Blacker, Autofill, Navigation, Downloads, DevTools, CORS, Directory, Sign-In, Live Caption, File System API, Accessibility und Safe Browsing. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.

Known affected: 4 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2022-4185 (GCVE-0-2022-4185)

OPENSUSE-SU-2024:12545-1

OPENSUSE-SU-2024:12948-1

ubuntu-cve-2022-4185

Vulnerability from osv_ubuntu

WID-SEC-W-2022-2202

Tags

Sightings

Nomenclature

Related by attack behaviour