CVE-2022-36220

Опубликовано: 19 авг. 2022

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Kiosk breakout (without quit password) in Safe Exam Browser (Windows) <3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog.

Ссылки

https://github.com/SafeExamBrowser/seb-win-refactoring/issues/434
Issue Tracking
Third Party Advisory
https://safeexambrowser.org/windows/win_release_notes_en.html
Release Notes
Vendor Advisory
https://github.com/SafeExamBrowser/seb-win-refactoring/issues/434
Issue Tracking
Third Party Advisory
https://safeexambrowser.org/windows/win_release_notes_en.html
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ethz:safe_exam_browser:*:*:*:*:*:windows:*:*

Версия до 3.4.0 (исключая)

EPSS

Процентиль: 58%

0.00936

Низкий

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-xgc9-g772-88rj