{"metadata": {"vulnerability": "CVE-2022-0337", "count": 35, "kinds": {"milestone": 5, "sighting": 15, "kev": 0, "other": 15}}, "data": [{"timestamp": "2022-01-21T00:00:00Z", "date_only": false, "value": "2022-01-21T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-0337", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-03-19T12:09:05Z", "date_only": false, "value": "2022-03-19T12:09:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1686", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "2e9805f8-2296-4e0c-b0eb-3dc853557fdf", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1a\ud83c\udfa9 \ud83e\udd1f\ud83c\udffb [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337\nURL\uff1ahttps://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1686", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-03-19T16:52:05Z", "date_only": false, "value": "2022-03-19T16:52:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/is39w-43gnzZg3G03Yjkzji1brkGQqh4d2xqLN1XKHeCkbJG", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "bccfcde6-733b-4cf5-a4f9-925b5b2d86de", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-03-19T17:52:14Z", "date_only": false, "value": "2022-03-19T17:52:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tmsilent/1182", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "d16c943c-d619-4cb1-a730-173c1e8755c3", "content": "Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337\n\nhttps://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera", "url": "https://t.me/tmsilent/1182", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-03-19T17:54:20Z", "date_only": false, "value": "2022-03-19T17:54:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fvQgdjlcf4AwXncPdzmcAB4MfD3TdDHwVjIJWqCVLzkPIKOJ", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "37aa1177-bd0a-42cc-8809-f2048cd36fac", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-03-21T11:00:33Z", "date_only": false, "value": "2022-03-21T11:00:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5645", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "5fc1ba0a-e663-4f57-b2fe-c3154bbf5a27", "content": "#exploit\n1. CVE-2022-24112:\nApache APISIX < 2.12.1 RCE and Docker Lab\nhttps://github.com/twseptian/cve-2022-24112\nhttps://github.com/Mr-xn/CVE-2022-24112\n]-> Check:\nhttps://github.com/shakeman8/CVE-2022-24112\n\n2. CVE-2022-0337:\nSystem environment variables leak on Google Chrome, Microsoft Edge and Opera\nhttps://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera", "url": "https://t.me/CyberSecurityTechnologies/5645", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-03-22T00:15:45Z", "date_only": false, "value": "2022-03-22T00:15:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/6101", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "1ae12511-99a3-439f-b119-8e702921d6da", "content": "\ud83c\udfa9 \ud83e\udd1f\ud83c\udffb [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337\n\nhttps://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera", "url": "https://t.me/thebugbountyhunter/6101", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-04-07T00:00:00Z", "date_only": true, "value": "2022-04-07", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-28466", "record": "CNVD-2022-28466", "field": "submitTime"}, {"timestamp": "2022-04-13T00:00:00Z", "date_only": true, "value": "2022-04-13", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-28466", "record": "CNVD-2022-28466", "field": "openTime"}, {"timestamp": "2023-01-02T00:00:00Z", "date_only": false, "value": "2023-01-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-0337", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-01-02T23:15:00Z", "date_only": false, "value": "2023-01-02T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CRCF-R254-J6XV", "record": "GHSA-CRCF-R254-J6XV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-01-02T23:15:00Z", "date_only": false, "value": "2023-01-02T23:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-0337", "record": "UBUNTU-CVE-2022-0337", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-01-02T23:15:00Z", "date_only": false, "value": "2023-01-02T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-0337", "record": "GSD-2022-0337", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-01-02T23:15:10.457Z", "date_only": false, "value": "2023-01-02T23:15:10.457", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-0337", "record": "FKIE_CVE-2022-0337", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-01-03T00:30:43Z", "date_only": false, "value": "2023-01-03T00:30:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CRCF-R254-J6XV", "record": "GHSA-CRCF-R254-J6XV", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-01-03T02:16:45Z", "date_only": false, "value": "2023-01-03T02:16:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/55788", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "c3131a85-3a93-445e-a5a9-81251837fe39", "content": "\u203c CVE-2022-0337 \u203c\n\nInappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. (Chrome security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/55788"}, {"timestamp": "2023-01-09T19:17:00Z", "date_only": false, "value": "2023-01-09T19:17Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-0337", "record": "GSD-2022-0337", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-01-09T21:30:22Z", "date_only": false, "value": "2023-01-09T21:30:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CRCF-R254-J6XV", "record": "GHSA-CRCF-R254-J6XV", "field": "modified"}, {"timestamp": "2023-02-20T00:00:00Z", "date_only": false, "value": "2023-02-20T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Chrome", "record": "CVE-2022-0337", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-11-21T07:37:49Z", "date_only": false, "value": "2023-11-21T07:37:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/312", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "4835f6d5-6d85-438b-8b83-434089589376", "content": "#ExploitObserverAlert\n\nCVE-2022-0337\n\nDESCRIPTION: Exploit Observer has 12 entries related to CVE-2022-0337. Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. (Chrome security severity: High)\n\nFIRST-EPSS: 0.000680000\nNVD-IS: 3.6\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/312"}, {"timestamp": "2023-12-13T01:19:11.445Z", "date_only": false, "value": "2023-12-13T01:19:11.445514Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-0337", "record": "GSD-2022-0337", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T23:25:40.233Z", "date_only": false, "value": "2024-08-02T23:25:40.233Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-0337", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-23T19:11:43.190Z", "date_only": false, "value": "2024-10-23T19:11:43.190444Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-0337", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-23T19:11:43.190Z", "date_only": false, "value": "2024-10-23T19:11:43.190444Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-0337", "record": "FKIE_CVE-2022-0337", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-23T19:12:06.068Z", "date_only": false, "value": "2024-10-23T19:12:06.068Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-0337", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-23T19:12:06.068Z", "date_only": false, "value": "2024-10-23T19:12:06.068Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-0337", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-09-08T16:49:24Z", "date_only": false, "value": "2025-09-08T16:49:24Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-0337", "record": "UBUNTU-CVE-2022-0337", "field": "modified"}, {"timestamp": "2026-06-17T04:20:25.140Z", "date_only": false, "value": "2026-06-17T04:20:25.140", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-0337", "record": "FKIE_CVE-2022-0337", "field": "lastModified"}, {"timestamp": "2026-06-29T03:41:24.884Z", "date_only": false, "value": "2026-06-29T03:41:24.884810Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mpfkxr5zdw2m", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "94daebcf-b9cc-44b0-85fa-83c98ea32f66", "content": "CVE-2022-0337: The Invisible Braille Blank That Tricks Browsers Into Running Malware \u2013 Here\u2019s How It Works +\u00a0Video\n\nIntroduction: A single invisible Unicode character \u2013 the Braille Blank Pattern (U+2800) \u2013 is being weaponized to spoof file extensions across Chromium-based browsers, Firefox, and\u2026", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mpfkxr5zdw2m"}, {"timestamp": "2026-07-29T12:00:51.903Z", "date_only": false, "value": "2026-07-29T12:00:51.903282Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/6755", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "159828ba-c280-484b-a0cf-8270041f9aef", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *ChExp-CVE-2022-0337-*\nGithub: https://github.com/maldev866/ChExp-CVE-2022-0337-", "url": "https://t.me/CVEhub/6755"}, {"timestamp": "2026-07-31T18:00:04.479Z", "date_only": false, "value": "2026-07-31T18:00:04.479279Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/6755", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "21c5f24c-091f-44f3-86d7-8c248c41788c", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *ChExp-CVE-2022-0337-*\nGithub: https://github.com/maldev866/ChExp-CVE-2022-0337-", "url": "https://t.me/CVEhub/6755", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-27T12:00:12.161Z", "date_only": false, "value": "2026-08-27T12:00:12.161181Z", "kind": "sighting", "label": "Seen", "source": "Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "2322fc7b-8495-4de7-aba2-6aae2482879a"}, {"timestamp": "2026-08-29T00:00:14.290Z", "date_only": false, "value": "2026-08-29T00:00:14.290369Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "9fe8c7cc-759d-4567-9e02-14706f1de72c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-22T07:00:04.969Z", "date_only": false, "value": "2026-09-22T07:00:04.969193Z", "kind": "sighting", "label": "Seen", "source": "Telegram/nMUaw2zZXyCly-Bqsn7kRIsLFdlVwXx5RzNb6RunyMxeZuU", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "1a850094-ec3d-4669-9e7d-d0d4455d45c4"}, {"timestamp": "2026-09-23T00:00:26.020Z", "date_only": false, "value": "2026-09-23T00:00:26.020722Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/nMUaw2zZXyCly-Bqsn7kRIsLFdlVwXx5RzNb6RunyMxeZuU", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "adc89f4b-0eb5-4ed6-b606-dff8a74dc03a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-02T01:43:22.255Z", "anchors": {"origin": {"timestamp": "2023-01-02T00:00:00Z", "date_only": false, "value": "2023-01-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-0337", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-01-02T00:00:00Z", "date_only": false, "value": "2023-01-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-0337", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2022-03-19T12:09:05Z", "date_only": false, "value": "2022-03-19T12:09:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1686", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "2e9805f8-2296-4e0c-b0eb-3dc853557fdf", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1a\ud83c\udfa9 \ud83e\udd1f\ud83c\udffb [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337\nURL\uff1ahttps://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1686", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -24925855.0, "hours": -6923.8486111111115, "days": -288.4936921296296, "min_seconds": -25012255.0, "max_seconds": -24925855.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2023-01-02T00:00:00Z", "date_only": false, "value": "2023-01-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-0337", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-03-19T12:09:05Z", "date_only": false, "value": "2022-03-19T12:09:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1686", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "2e9805f8-2296-4e0c-b0eb-3dc853557fdf", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1a\ud83c\udfa9 \ud83e\udd1f\ud83c\udffb [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337\nURL\uff1ahttps://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1686", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 120966202.255532, "hours": 33601.72284875889, "days": 1400.0717853649537, "min_seconds": 120879802.255532, "max_seconds": 120966202.255532, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-01-02T00:00:00Z", "date_only": false, "value": "2023-01-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-0337", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-02T01:43:22.255Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 145892057.255532, "hours": 40525.57145987, "days": 1688.5654774945833, "min_seconds": 145892057.255532, "max_seconds": 145892057.255532, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-03-19T12:09:05Z", "date_only": false, "value": "2022-03-19T12:09:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1686", "record": "CVE-2022-0337", "field": "creation_timestamp", "uuid": "2e9805f8-2296-4e0c-b0eb-3dc853557fdf", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1a\ud83c\udfa9 \ud83e\udd1f\ud83c\udffb [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337\nURL\uff1ahttps://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1686", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-02T01:43:22.255Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}