{"metadata": {"vulnerability": "CVE-2022-2156", "count": 53, "kinds": {"milestone": 10, "sighting": 4, "kev": 0, "other": 39}}, "data": [{"timestamp": "2022-06-21T00:00:00Z", "date_only": false, "value": "2022-06-21T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202206-1670", "record": "VAR-202206-1670", "field": "sources_release_date.data.1.date", "linked_record": true}, {"timestamp": "2022-06-21T00:00:00Z", "date_only": false, "value": "2022-06-21T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-2156", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-06-22T00:00:00Z", "date_only": false, "value": "2022-06-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-576", "record": "CERTFR-2022-AVI-576", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2022-06-22T15:02:51Z", "date_only": false, "value": "2022-06-22T15:02:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/47800", "record": "CVE-2022-2156", "field": "creation_timestamp", "uuid": "035bfbdd-f127-4341-9411-11951ddf8d50", "content": "Google Patches 14 Vulnerabilities With Release of Chrome 103\nhttps://www.securityweek.com/google-patches-14-vulnerabilities-release-chrome-103\n\nGoogle this week announced the release of Chrome 103 to the stable channel with patches for a total of 14 vulnerabilities, including nine reported by external researchers.\nThe most severe of these bugs is CVE-2022-2156, which is described as a critical-severity use-after-free issue in Base.\nread more (https://www.securityweek.com/google-patches-14-vulnerabilities-release-chrome-103)", "url": "https://t.me/information_security_channel/47800"}, {"timestamp": "2022-06-23T10:20:36Z", "date_only": false, "value": "2022-06-23T10:20:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/3090", "record": "CVE-2022-2156", "field": "creation_timestamp", "uuid": "3aa0b5f8-07e8-456c-939e-426a792145d6", "content": "\u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e Chrome 103,\n\u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 14 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2022-2156 \u0432 Base, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u041c\u0430\u0440\u043a \u0411\u0440\u044d\u043d\u0434 \u0438\u0437 Google Project Zero.\n\n\u0412 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438\u043b\u0438 \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Chrome 103 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0442\u0430\u043a\u0436\u0435 \u0442\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0435 \u043d\u0430 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b:\n\n- Interest groups (CVE-2022-2157, \u0432\u044b\u0441\u043e\u043a\u0430\u044f \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u041d\u0430\u043d \u0412\u0430\u043d \u0438 \u0413\u0443\u0430\u043d \u0413\u0443\u043d \u0438\u0437 360 Alpha Lab),\n- WebApp Provider (CVE-2022-2161, \u0441\u0440\u0435\u0434\u043d\u044f\u044f \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0427\u0436\u0438\u0445\u0443\u0430 \u042f\u043e \u0438\u0437 KunLun Lab),\n- Cast UI and Toolbar (CVE-2022-2163, \u043d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c, \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0427\u0430\u043e\u044e\u0430\u043d\u044c \u041f\u044d\u043d).\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0435\u0439 \u0442\u0438\u043f\u043e\u0432 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 JavaScript \u0438 WebAssembly - CVE-2022-2158, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0411\u043e\u0445\u0430\u043d \u041b\u044e \u0438\u0437 Tencent Security Xuanwu Lab.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0438 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0432 DevTools (CVE-2022-2160), API \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (CVE-2022-2162), \u043d\u0435\u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0432 Extensions API (CVE-2022-2164 \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 URL (CVE-2022-2165).\n\nGoogle \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 44 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043e\u043a, \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Chrome \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0434\u043b\u044f Windows, Mac \u0438 Linux \u043a\u0430\u043a \u0432\u0435\u0440\u0441\u0438\u044f 103.0.5060.53, \u0442\u0430\u043a \u0447\u0442\u043e \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.", "url": "https://t.me/true_secator/3090"}, {"timestamp": "2022-06-24T00:00:00Z", "date_only": false, "value": "2022-06-24T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202206-1670", "record": "VAR-202206-1670", "field": "sources_update_date.data.1.date", "linked_record": true}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-581", "record": "CERTFR-2022-AVI-581", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2022-06-29T09:28:30Z", "date_only": false, "value": "2022-06-29T09:28:30Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10035-1", "record": "OPENSUSE-SU-2022:10035-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-06-29T09:28:30Z", "date_only": false, "value": "2022-06-29T09:28:30Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10035-1", "record": "OPENSUSE-SU-2022:10035-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2022-06-29T09:28:30Z", "date_only": false, "value": "2022-06-29T09:28:30Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10035-1", "record": "OPENSUSE-SU-2022:10035-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2022-06-29T09:28:30Z", "date_only": false, "value": "2022-06-29T09:28:30Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10035-1", "record": "OPENSUSE-SU-2022:10035-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-06-29T09:28:46Z", "date_only": false, "value": "2022-06-29T09:28:46Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10036-1", "record": "OPENSUSE-SU-2022:10036-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-06-29T09:28:46Z", "date_only": false, "value": "2022-06-29T09:28:46Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10036-1", "record": "OPENSUSE-SU-2022:10036-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2022-06-29T09:28:46Z", "date_only": false, "value": "2022-06-29T09:28:46Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10036-1", "record": "OPENSUSE-SU-2022:10036-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2022-06-29T09:28:46Z", "date_only": false, "value": "2022-06-29T09:28:46Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10036-1", "record": "OPENSUSE-SU-2022:10036-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-06-30T00:00:00Z", "date_only": false, "value": "2022-06-30T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202206-1670", "record": "VAR-202206-1670", "field": "sources_update_date.data.0.date", "linked_record": true}, {"timestamp": "2022-07-05T22:20:22.607Z", "date_only": false, "value": "2022-07-05T22:20:22.607000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202206-1670", "record": "VAR-202206-1670", "field": "last_update_date", "linked_record": true}, {"timestamp": "2022-07-21T00:00:00Z", "date_only": false, "value": "2022-07-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-664", "record": "CERTFR-2022-AVI-664", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2022-07-22T13:05:38Z", "date_only": false, "value": "2022-07-22T13:05:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6444", "record": "CVE-2022-2156", "field": "creation_timestamp", "uuid": "ae2f1e05-e54c-441a-8635-bd5a04ff3b67", "content": "#exploit\n1. MyBB 0day Authenticated RCE\nhttps://0x1337.ninja/2022/07/19/mybb-0day-authenticated-remote-code-execution\n\n2. CVE-2022-2156:\nChrome - raw_ptr broke implicit scoped_refptr for receivers in base::Bind\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2314", "url": "https://t.me/CyberSecurityTechnologies/6444", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-07-28T00:40:20Z", "date_only": false, "value": "2022-07-28T00:40:20.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-2156", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-07-28T01:15:00Z", "date_only": false, "value": "2022-07-28T01:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PVF7-FVGH-4CQ4", "record": "GHSA-PVF7-FVGH-4CQ4", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2022-07-28T01:15:00Z", "date_only": false, "value": "2022-07-28T01:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-2156", "record": "UBUNTU-CVE-2022-2156", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-07-28T01:15:00Z", "date_only": false, "value": "2022-07-28T01:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-2156", "record": "GSD-2022-2156", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2022-07-28T01:15:16.790Z", "date_only": false, "value": "2022-07-28T01:15:16.790", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2156", "record": "FKIE_CVE-2022-2156", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-07-29T00:00:47Z", "date_only": false, "value": "2022-07-29T00:00:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PVF7-FVGH-4CQ4", "record": "GHSA-PVF7-FVGH-4CQ4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-08-03T00:00:53Z", "date_only": false, "value": "2022-08-03T00:00:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PVF7-FVGH-4CQ4", "record": "GHSA-PVF7-FVGH-4CQ4", "field": "modified", "linked_record": true}, {"timestamp": "2022-08-14T21:08:36Z", "date_only": false, "value": "2022-08-14T21:08:36.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Chrome", "record": "CVE-2022-2156", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-10-26T13:49:00Z", "date_only": false, "value": "2022-10-26T13:49Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-2156", "record": "GSD-2022-2156", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-12-13T01:19:19.781Z", "date_only": false, "value": "2023-12-13T01:19:19.781947Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-2156", "record": "GSD-2022-2156", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12158-1", "record": "OPENSUSE-SU-2024:12158-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12158-1", "record": "OPENSUSE-SU-2024:12158-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12158-1", "record": "OPENSUSE-SU-2024:12158-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12158-1", "record": "OPENSUSE-SU-2024:12158-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-08-03T00:32:07.960Z", "date_only": false, "value": "2024-08-03T00:32:07.960Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-2156", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T00:32:07.960Z", "date_only": false, "value": "2024-08-03T00:32:07.960Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-2156", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-09-08T16:49:35Z", "date_only": false, "value": "2025-09-08T16:49:35Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-2156", "record": "UBUNTU-CVE-2022-2156", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T04:41:24.617Z", "date_only": false, "value": "2026-06-17T04:41:24.617", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2156", "record": "FKIE_CVE-2022-2156", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-26T02:02:54.809Z", "date_only": false, "value": "2026-07-26T02:02:54.809354Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/385", "record": "CVE-2022-2156", "field": "creation_timestamp", "uuid": "8206ccb5-f813-4514-9f8a-99876074b7b0", "content": "Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 14 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome (103.0.5060.53) \u0434\u043b\u044f Windows, Linux \u0438 Mac OS, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 14 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0434\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0438 \u0434\u0432\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-2156, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 use after free \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Base.  \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 CVE-2022-2157 \u0438 CVE-2022-2158 \u2013 \u0441 use after free \u0438 type confusion.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u043c Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0442 500 \u0434\u043e 20 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html \n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Chrome", "url": "https://t.me/EchelonEyes/385"}, {"timestamp": "2026-09-20T19:41:39Z", "date_only": false, "value": "2026-09-20T19:41:39Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10035-1", "record": "OPENSUSE-SU-2022:10035-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T19:41:39Z", "date_only": false, "value": "2026-09-20T19:41:39Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10035-1", "record": "OPENSUSE-SU-2022:10035-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T19:41:41Z", "date_only": false, "value": "2026-09-20T19:41:41Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10036-1", "record": "OPENSUSE-SU-2022:10036-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T19:41:41Z", "date_only": false, "value": "2026-09-20T19:41:41Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10036-1", "record": "OPENSUSE-SU-2022:10036-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T20:32:55Z", "date_only": false, "value": "2026-09-20T20:32:55Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12158-1", "record": "OPENSUSE-SU-2024:12158-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T20:32:55Z", "date_only": false, "value": "2026-09-20T20:32:55Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12158-1", "record": "OPENSUSE-SU-2024:12158-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T20:50:05Z", "date_only": false, "value": "2026-09-20T20:50:05Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-01T07:54:38.054Z", "date_only": false, "value": "2026-10-01T07:54:38.054711Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2024-PL02346", "record": "CLEANSTART-2024-PL02346", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-08T14:25:09Z", "date_only": false, "value": "2026-10-08T14:25:09Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2024-PL02346", "record": "CLEANSTART-2024-PL02346", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-18T10:26:10Z", "date_only": false, "value": "2026-10-18T10:26:10Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-18T10:26:10Z", "date_only": false, "value": "2026-10-18T10:26:10Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.current_release_date", "linked_record": true}], "metrics": {"as_of": "2026-11-06T10:25:26.053Z", "anchors": {"origin": {"timestamp": "2022-06-29T09:28:30Z", "date_only": false, "value": "2022-06-29T09:28:30Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10035-1", "record": "OPENSUSE-SU-2022:10035-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-06-29T09:28:30Z", "date_only": false, "value": "2022-06-29T09:28:30Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10035-1", "record": "OPENSUSE-SU-2022:10035-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2022-07-22T13:05:38Z", "date_only": false, "value": "2022-07-22T13:05:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6444", "record": "CVE-2022-2156", "field": "creation_timestamp", "uuid": "ae2f1e05-e54c-441a-8635-bd5a04ff3b67", "content": "#exploit\n1. MyBB 0day Authenticated RCE\nhttps://0x1337.ninja/2022/07/19/mybb-0day-authenticated-remote-code-execution\n\n2. CVE-2022-2156:\nChrome - raw_ptr broke implicit scoped_refptr for receivers in base::Bind\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2314", "url": "https://t.me/CyberSecurityTechnologies/6444", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 2000228.0, "hours": 555.6188888888889, "days": 23.150787037037038, "min_seconds": 2000228.0, "max_seconds": 2000228.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-06-29T09:28:30Z", "date_only": false, "value": "2022-06-29T09:28:30Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10035-1", "record": "OPENSUSE-SU-2022:10035-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2022-07-22T13:05:38Z", "date_only": false, "value": "2022-07-22T13:05:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6444", "record": "CVE-2022-2156", "field": "creation_timestamp", "uuid": "ae2f1e05-e54c-441a-8635-bd5a04ff3b67", "content": "#exploit\n1. MyBB 0day Authenticated RCE\nhttps://0x1337.ninja/2022/07/19/mybb-0day-authenticated-remote-code-execution\n\n2. CVE-2022-2156:\nChrome - raw_ptr broke implicit scoped_refptr for receivers in base::Bind\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2314", "url": "https://t.me/CyberSecurityTechnologies/6444", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 137465816.053654, "hours": 38184.94890379277, "days": 1591.0395376580323, "min_seconds": 137465816.053654, "max_seconds": 137465816.053654, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-06-29T09:28:30Z", "date_only": false, "value": "2022-06-29T09:28:30Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10035-1", "record": "OPENSUSE-SU-2022:10035-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-06T10:25:26.053Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 135465588.053654, "hours": 37629.330014903884, "days": 1567.888750620995, "min_seconds": 135465588.053654, "max_seconds": 135465588.053654, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-07-22T13:05:38Z", "date_only": false, "value": "2022-07-22T13:05:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6444", "record": "CVE-2022-2156", "field": "creation_timestamp", "uuid": "ae2f1e05-e54c-441a-8635-bd5a04ff3b67", "content": "#exploit\n1. MyBB 0day Authenticated RCE\nhttps://0x1337.ninja/2022/07/19/mybb-0day-authenticated-remote-code-execution\n\n2. CVE-2022-2156:\nChrome - raw_ptr broke implicit scoped_refptr for receivers in base::Bind\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2314", "url": "https://t.me/CyberSecurityTechnologies/6444", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-06T10:25:26.053Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}