CVE-2022-22779

    Dashboard / Vulnerabilities / CVE-2022-22779

    CVE-2022-22779

    Published: 9 Feb 2022Last Modified: 9 Jul 2026

    Summary:

    Details: The Keybase Clients for macOS and Windows before version 5.9.0 fails to properly remove exploded messages initiated by a user. This can occur if the receiving user switches to a non-chat feature and places the host in a sleep state before the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from a user’s filesystem.

    References: https://explore.zoom.us/en/trust/security/security-bulletin

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -29bfd9d39f6a403eb1142d228b0b8a5cc7b149af

    Affected versions

    v5.8.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-22779 | CVE-DB