{"metadata": {"vulnerability": "CVE-2022-2294", "count": 159, "kinds": {"milestone": 15, "sighting": 43, "kev": 11, "other": 90}}, "data": [{"timestamp": "2022-07-03T00:00:00Z", "date_only": false, "value": "2022-07-03T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-2294", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-07-04T00:00:00Z", "date_only": false, "value": "2022-07-04T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.9.date"}, {"timestamp": "2022-07-05T00:00:00Z", "date_only": false, "value": "2022-07-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-609", "record": "CERTFR-2022-AVI-609", "field": "revisions.0.revision_date"}, {"timestamp": "2022-07-05T04:00:00Z", "date_only": false, "value": "2022-07-05T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=828", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "35a86c18-0d88-4706-b604-e7a0729da11a", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=828"}, {"timestamp": "2022-07-05T04:57:49Z", "date_only": false, "value": "2022-07-05T04:57:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/2341", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "eedc7047-ddc3-4bc7-8009-bcb658d563e6", "content": "UPDATE your Google Chrome browser for Windows, macOS, Linux and Android devices to patch a newly discovered high-severity zero-day vulnerability (CVE-2022-2294) that is being exploited in the wild.\n\nDetails: https://thehackernews.com/2022/07/update-google-chrome-browser-to-patch.html", "url": "https://t.me/thehackernews/2341"}, {"timestamp": "2022-07-05T06:27:47Z", "date_only": false, "value": "2022-07-05T06:27:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/1587", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "55e0db88-d483-44b1-9114-0ed1ac35ff39", "content": "Google patched security issues in Chrome for Android, one of the exploit exists in the wild (CVE-2022-2294, CVE-2022-2295)\nhttps://chromereleases.googleblog.com/2022/07/chrome-for-android-update.html", "url": "https://t.me/androidMalware/1587"}, {"timestamp": "2022-07-05T09:35:16Z", "date_only": false, "value": "2022-07-05T09:35:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/942", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "8c7cb097-9108-45ac-bb78-9ebf7fc089c7", "content": "\u200b\u26a1\ufe0f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0430\u0436\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435: \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u0430\u044f 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome.\n\n\ud83d\udcac \u0412 \u0441\u0432\u0435\u0436\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043e\u043f\u0430\u0441\u043d\u0443\u044e 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435. \u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2022-2294, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebRTC.\n\n0-day \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u042f\u043d \u0412\u043e\u0436\u0442\u0435\u0441\u0435\u043a, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Avast Threat Intelligence. Google \u043d\u0435 \u0441\u0442\u0430\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u0441\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0435\u0435 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435. \u0421\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0445\u043e\u0447\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\nCVE-2022-2294 \u0441\u0442\u0430\u043b\u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u0439 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome. \u0414\u043e \u043d\u0435\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c CVE-2022-0609, CVE-2022-1096 \u0438 CVE-2022-1364.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b  \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 103.0.5060.114 \u043d\u0430 \u0432\u0441\u0435\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e \u043c\u0435\u0440\u0435 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f.\n\n#Google #0day #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #GoogleChrome #\u041a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/942"}, {"timestamp": "2022-07-05T11:15:46Z", "date_only": false, "value": "2022-07-05T11:15:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/3130", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "f5e0b06a-d482-4886-90c0-38865c375842", "content": "Google \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u044b\u0439 \u0437\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u0433\u043e\u0434 0-day \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f 103.0.5060.114 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0432 \u043a\u0430\u043d\u0430\u043b\u0435 Stable Desktop \u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2022-2294, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0421\u043f\u0435\u0448\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u00a0\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u0443\u0447\u0438\u00a0\u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebRTC, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 01 \u0438\u044e\u043b\u044f \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u042f\u043d \u0412\u043e\u0439\u0442\u0435\u0441\u0435\u043a \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Avast Threat Intelligence. \u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0430\u0440\u044c\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 RCE \u0434\u043e \u043e\u0431\u0445\u043e\u0434\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a CVE-2022-2294 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b: CVE-2022-2295, \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0443 \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8, \u0438 CVE-2022-2296, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 Chrome OS.\n\n\u0412 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 103 (103.0.5060.71) \u0434\u043b\u044f Android \u0441\u043a\u043e\u0440\u043e \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0438 \u043d\u0430 Google Play.\n\n\u0414\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043e\u0440\u0433\u0430\u043d\u0438\u0447\u0435\u043d \u0434\u043e \u0442\u0435\u0445, \u043f\u043e\u0440 \u043f\u043e\u043a\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u043d\u0430\u043a\u0430\u0442\u044f\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0441 \u0447\u0435\u043c \u043c\u044b \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0437\u0430\u0442\u044f\u0433\u0438\u0432\u0430\u0442\u044c.", "url": "https://t.me/true_secator/3130"}, {"timestamp": "2022-07-05T11:38:18Z", "date_only": false, "value": "2022-07-05T11:38:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/alexmakus/4742", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "a4595d7a-95bf-47cb-958a-8e7ae2deda77", "content": "\u0422\u0430\u043c \u043d\u0443\u0436\u043d\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Chrome \u043f\u043e\u0434 Windows - CVE-2022-2294 \u044f\u043a\u043e\u0431\u044b \u043c\u043e\u0436\u0435\u0442 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f. \u0422\u0430\u043c \u0440\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 WebRTC, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u044d\u0444\u0444\u0435\u043a\u0442\u0430\u043c \u043e\u0442 \u043f\u0430\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043e \u043e\u0431\u0445\u043e\u0434\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b. \u0414\u0435\u0442\u0430\u043b\u0435\u0439 \u043f\u0440\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e Google \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442. \u042d\u0442\u043e \u0443\u0436\u0435 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443. \n\n\nhttps://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_25.html", "url": "https://t.me/alexmakus/4742"}, {"timestamp": "2022-07-06T00:00:00Z", "date_only": true, "value": "2022-07-06", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-49948", "record": "CNVD-2022-49948", "field": "submitTime"}, {"timestamp": "2022-07-06T02:02:08Z", "date_only": false, "value": "2022-07-06T02:02:08.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cyberbannews_ir/6182", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "11085de4-7c0f-4d43-8c37-b247ad58f84f", "content": "\ud83d\uded1\u0627\u0635\u0644\u0627\u062d \u0686\u0647\u0627\u0631\u0645\u06cc\u0646 \u0628\u0627\u06af \u0627\u0645\u0646\u06cc\u062a\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645 \u062f\u0631 \u0633\u0627\u0644 2022\n\n \u06af\u0648\u06af\u0644 \u0628\u0627 \u0647\u062f\u0641 \u0627\u0635\u0644\u0627\u062d \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632 \u0635\u0641\u0631 \u062c\u062f\u06cc\u060c \u0646\u0633\u062e\u0647 103.0.5060.114 \u06a9\u0631\u0648\u0645 \u0631\u0627 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0645\u0648\u0631\u062f \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u0647\u0627\u062c\u0645\u06cc\u0646 \u0642\u0631\u0627\u0631 \u062f\u0627\u0634\u062a\u060c \u0686\u0647\u0627\u0631\u0645\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0635\u0644\u0627\u062d \u0634\u062f\u0647 \u06a9\u0631\u0648\u0645 \u062f\u0631 \u0633\u0627\u0644 2022 \u0627\u0633\u062a.\n\n\u06af\u0648\u06af\u0644 \u0627\u0632 \u0648\u062c\u0648\u062f \u06a9\u062f\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 CVE-2022-2294 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0645\u0637\u0644\u0639 \u0627\u0633\u062a. \n\n#\u0627\u0645\u0646\u06cc\u062a_\u0648\u0628\n\n\u2705 \u0628\u06cc\u0634\u062a\u0631 \u0628\u062e\u0648\u0627\u0646\u06cc\u062f:\nhttps://bit.ly/3AtVMcH\n\n@cyberbannews_ir", "url": "https://t.me/cyberbannews_ir/6182"}, {"timestamp": "2022-07-06T11:04:09Z", "date_only": false, "value": "2022-07-06T11:04:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/secmedia/466", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "ccc89c76-15f7-4194-beda-6b472542ee55", "content": "\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u043e\u043c 103.0.5060.114. \u0415\u0433\u043e \u0432\u043d\u0435\u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0432\u044b\u0445\u043e\u0434 \u043f\u0440\u0438\u0437\u0432\u0430\u043d \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-2294, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.", "url": "https://t.me/secmedia/466"}, {"timestamp": "2022-07-07T00:00:00Z", "date_only": true, "value": "2022-07-07", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-49948", "record": "CNVD-2022-49948", "field": "openTime"}, {"timestamp": "2022-07-07T00:00:00Z", "date_only": false, "value": "2022-07-07T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-616", "record": "CERTFR-2022-AVI-616", "field": "revisions.0.revision_date"}, {"timestamp": "2022-07-07T04:00:00Z", "date_only": false, "value": "2022-07-07T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=829", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "acf67ed1-6ca5-4538-ad18-f66443386f5e", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=829"}, {"timestamp": "2022-07-08T21:58:31Z", "date_only": false, "value": "2022-07-08T21:58:31.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MrVGunz/313", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "579b62e0-5b59-4674-aa20-e46ddd22dc33", "content": "UPDATE your Google Chrome browser for Windows, macOS, Linux and Android devices to patch a newly discovered high-severity zero-day vulnerability (CVE-2022-2294) that is being exploited in the wild.\n\nDetails: https://thehackernews.com/2022/07/update-google-chrome-browser-to-patch.html", "url": "https://t.me/MrVGunz/313"}, {"timestamp": "2022-07-12T22:21:58Z", "date_only": false, "value": "2022-07-12T22:21:58Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10055-1", "record": "OPENSUSE-SU-2022:10055-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-07-12T22:21:58Z", "date_only": false, "value": "2022-07-12T22:21:58Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10055-1", "record": "OPENSUSE-SU-2022:10055-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-07-12T22:21:58Z", "date_only": false, "value": "2022-07-12T22:21:58Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10055-1", "record": "OPENSUSE-SU-2022:10055-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-07-12T22:21:58Z", "date_only": false, "value": "2022-07-12T22:21:58Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10055-1", "record": "OPENSUSE-SU-2022:10055-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-07-13T12:10:33Z", "date_only": false, "value": "2022-07-13T12:10:33Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10057-1", "record": "OPENSUSE-SU-2022:10057-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-07-13T12:10:33Z", "date_only": false, "value": "2022-07-13T12:10:33Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10057-1", "record": "OPENSUSE-SU-2022:10057-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-07-13T12:10:33Z", "date_only": false, "value": "2022-07-13T12:10:33Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10057-1", "record": "OPENSUSE-SU-2022:10057-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-07-13T12:10:33Z", "date_only": false, "value": "2022-07-13T12:10:33Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10057-1", "record": "OPENSUSE-SU-2022:10057-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-07-14T00:00:00Z", "date_only": false, "value": "2022-07-14T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-2294", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2022-07-14T00:00:00Z", "date_only": false, "value": "2022-07-14T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2294", "record": "FKIE_CVE-2022-2294", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2022-07-20T22:00:00Z", "date_only": false, "value": "2022-07-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-07-20T22:00:00Z", "date_only": false, "value": "2022-07-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0782", "record": "WID-SEC-W-2022-0782", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-07-20T22:00:00Z", "date_only": false, "value": "2022-07-20T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-07-20T22:00:00Z", "date_only": false, "value": "2022-07-20T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0782", "record": "WID-SEC-W-2022-0782", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-07-20T22:00:00Z", "date_only": false, "value": "2022-07-20T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-07-20T22:00:00Z", "date_only": false, "value": "2022-07-20T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0782", "record": "WID-SEC-W-2022-0782", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-07-21T00:00:00Z", "date_only": false, "value": "2022-07-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-664", "record": "CERTFR-2022-AVI-664", "field": "revisions.0.revision_date"}, {"timestamp": "2022-07-21T00:00:00Z", "date_only": false, "value": "2022-07-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-665", "record": "CERTFR-2022-AVI-665", "field": "revisions.0.revision_date"}, {"timestamp": "2022-07-21T22:00:00Z", "date_only": false, "value": "2022-07-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-07-21T22:00:00Z", "date_only": false, "value": "2022-07-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0782", "record": "WID-SEC-W-2022-0782", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-07-22T14:01:03Z", "date_only": false, "value": "2022-07-22T14:01:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3207", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "ac553529-8cea-41e5-be19-06d25e0d4c43", "content": "\u0420\u044f\u0434\u044b \u0431\u043e\u0440\u0446\u043e\u0432 \u0441 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u043f\u043e\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f. \n\n\u0412\u0441\u043b\u0435\u0434 \u0437\u0430 Microsoft, Google \u0438 Citizen Lab \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0435 \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u043a\u0430\u0442\u0438\u043b\u0438 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Avast, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e Candiru \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 0-day \u0432 Google Chrome \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0437\u0430 \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043b\u0438\u0446\u0430\u043c\u0438 \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u041f\u041e DevilsTongue.\n\n\u041f\u043e\u0441\u043b\u0435 \u043d\u0430\u0435\u0437\u0434\u0430 Citizen Lab \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0441\u043e\u0444\u0442\u0430 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b \u0432\u0441\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 DevilsTongue \u0438 \u0443\u0448\u0435\u043b \u0432 \u0442\u0435\u043d\u044c, \u043a\u0430\u043a \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043e\u0441\u043d\u0430\u0449\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0430.\n\n\u041d\u0430 \u0432\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0432\u0437\u044f\u043b\u0438 CVE-2022-2294, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 WebRTC \u0438 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041f\u0430\u0442\u0447 \u0434\u043b\u044f \u0431\u0430\u0433\u0438, \u043a\u0430\u043a \u043c\u044b \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435, \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d Google 4 \u0438\u044e\u043b\u044f, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438  0-day \u0442\u043e\u0433\u0434\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0438\u0441\u044c. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Avast.\n\nCandiru \u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0430\u0440\u0442\u0435 2022 \u0433\u043e\u0434\u0430, \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044f\u0441\u044c \u043d\u0430 \u0446\u0435\u043b\u0438 \u0432 \u041b\u0438\u0432\u0430\u043d\u0435, \u0422\u0443\u0440\u0446\u0438\u0438, \u0419\u0435\u043c\u0435\u043d\u0435 \u0438 \u041f\u0430\u043b\u0435\u0441\u0442\u0438\u043d\u0435.\n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u0443\u044e \u0442\u0430\u043a\u0442\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0432\u043e\u0434\u043e\u043f\u043e\u0439, \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044f \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0438\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u043d\u043e\u0432\u044b\u0435 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0441 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Chromium \u043e\u0431\u0440\u0430\u0449\u0430\u043b\u0438\u0441\u044c \u0436\u0435\u0440\u0442\u0432\u044b, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u043f\u043e\u0441\u043b\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432.\n\n\u0412 \u043e\u0434\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0434\u043b\u043e\u043c\u0438\u043b\u0438 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0432 \u041b\u0438\u0432\u0430\u043d\u0435 \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b JavaScript, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 XXS \u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0435\u043b\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c. \n\n\u041f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0436\u0435\u0440\u0442\u0432\u044b \u043f\u0440\u043e\u0444\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c, \u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u043b\u0438\u0441\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0431\u0438\u0440\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u044f\u0437\u044b\u043a\u0430, \u0447\u0430\u0441\u043e\u0432\u043e\u0433\u043e \u043f\u043e\u044f\u0441\u0430, \u044d\u043a\u0440\u0430\u043d\u0430, \u0442\u0438\u043f\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u043f\u0430\u043c\u044f\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 cookie \u0438 \u0434\u0440.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u041b\u0438\u0432\u0430\u043d\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f 0-day \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0430\u043a\u0442\u043e\u0440\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0448\u0435\u043b\u043b-\u043a\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Avast \u043d\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u0442\u0435\u043c, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u0440\u0435\u0434\u0435 Windows.\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f DevilsTongue \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b BYOVD, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\nAvast \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438, \u0447\u0442\u043e BYOVD, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 Candiru, \u0442\u0430\u043a\u0436\u0435 \u044f\u0432\u043b\u044f\u043b\u0441\u044f 0-day, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0434\u0430\u0436\u0435 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c.\n\n\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Avast \u043d\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0442\u043e\u0447\u043d\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0446\u0435\u043b\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043f\u043e\u043b\u0430\u0433\u0430\u044f, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u0438\u044f\u043c\u0438, \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c: \u043f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u0443 \u044d\u0442\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0442\u043e\u0447\u043d\u043e \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u0435.", "url": "https://t.me/true_secator/3207"}, {"timestamp": "2022-07-22T16:22:17Z", "date_only": false, "value": "2022-07-22T16:22:17", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.4.date"}, {"timestamp": "2022-07-22T16:22:49Z", "date_only": false, "value": "2022-07-22T16:22:49", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.7.date"}, {"timestamp": "2022-07-22T16:25:07Z", "date_only": false, "value": "2022-07-22T16:25:07", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.6.date"}, {"timestamp": "2022-07-27T17:00:35Z", "date_only": false, "value": "2022-07-27T17:00:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/2110", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "80d487a3-e16e-4969-859c-1ce571374984", "content": "\u0428\u043f\u0438\u043e\u043d DevilsTongue \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e 0-day \u0432 Google Chrome\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e 0-day \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2022-2294, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0430\u0442\u0447\u0435\u0439. \u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u044d\u0442\u043e \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u0431\u0440\u0435\u0448\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u0430\u044f \u0432 Chrome \u0432 2022 \u0433\u043e\u0434\u0443.\n\u25b6\ufe0f \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/2110"}, {"timestamp": "2022-07-28T00:00:00Z", "date_only": false, "value": "2022-07-28T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.0.date"}, {"timestamp": "2022-07-28T00:00:00Z", "date_only": false, "value": "2022-07-28T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-2294", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-07-28T02:15:00Z", "date_only": false, "value": "2022-07-28T02:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9Q96-CWQ7-CR4M", "record": "GHSA-9Q96-CWQ7-CR4M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-07-28T02:15:00Z", "date_only": false, "value": "2022-07-28T02:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-2294", "record": "UBUNTU-CVE-2022-2294", "field": "published"}, {"timestamp": "2022-07-28T02:15:00Z", "date_only": false, "value": "2022-07-28T02:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-2294", "record": "GSD-2022-2294", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-07-28T02:15:07.797Z", "date_only": false, "value": "2022-07-28T02:15:07.797000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.10.date"}, {"timestamp": "2022-07-28T02:15:07.797Z", "date_only": false, "value": "2022-07-28T02:15:07.797", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2294", "record": "FKIE_CVE-2022-2294", "field": "published"}, {"timestamp": "2022-07-28T19:12:00Z", "date_only": false, "value": "2022-07-28T19:12:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.3.date"}, {"timestamp": "2022-07-29T00:00:47Z", "date_only": false, "value": "2022-07-29T00:00:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9Q96-CWQ7-CR4M", "record": "GHSA-9Q96-CWQ7-CR4M", "field": "published"}, {"timestamp": "2022-07-30T13:19:16Z", "date_only": false, "value": "2022-07-30T13:19:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/freelearningtech/1267", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "dd011d75-2438-4a5b-84a6-c3134192c7d5", "content": "*\ud83d\udd30Chrome Zero-day Abused to Spread Spyware to Target Journalists*\ud83d\udd30\n\nThe spyware vendor from Israel, Candiru, was discovered abusing a zero-day vulnerability in Google Chrome to spy on journalists and high-interest individuals from the Middle East, using a spyware called DevilsTongue.\n\n\n*The abuse of zero-day*\n\nAvast researchers spotted the vulnerability and reported it to Google. Further, they disclosed the details after examining DevilsTongue attacks on their clients.\nCandiru started abusing the zero-day in March and targeting users in Palestine, Turkey, Yemen, and Lebanon.\nThe flaw, tracked as CVE-2022-2294, is a high-severity heap-based buffer overflow in WebRTC. Its successful exploitation may lead to code execution on the targeted device.\nAfter being reported to Google, the tech firm patched the exploited zero-day on July 4, which has been under active exploitation in cyberattacks.\n\nSince the bug exists in WebRTC, it also impacts Safari browser but the exploit found only work on Windows.\n\n*Attack vectors*\n\nThe spyware operators have used watering holes and spear-phishing tactics in their attacks.\nThis attack requires no interaction with the victim, such as clicking on a link or downloading a file. \nInstead, a user is made to open an already compromised website or the one created by hackers in a Chromium-based browser or Chrome. \nIn one instance, the attackers infected a website used by a news agency in Lebanon and inserted JavaScript snippets to enable XSS attacks, and redirected targets to the exploit server.\nIn the Lebanon case, the zero-day allowed shellcode execution inside a renderer process and further chained with a sandbox escape flaw that Avast failed to recover for investigation.\n\n*What was the target?*\n\nAfter the initial infection, the DevilsTongue spyware used a BYOVD (bring your own driver) step to elevate the privileges and achieve read and write rights to the infected device's memory. Researchers believe the cybercriminals used the spyware to learn about what news stories the targeted journalist are working on.\n\n*Conclusion*\n\nThe recent report sheds light on the dangers of services offered by commercial spyware vendors. These vendors are developing or buying zero-day exploits to target people asked by their clients. Thus, always protect data with powerful encryption and update devices with the latest security updates.", "url": "https://t.me/freelearningtech/1267"}, {"timestamp": "2022-08-15T16:05:06Z", "date_only": false, "value": "2022-08-15T16:05:06", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.2.date"}, {"timestamp": "2022-08-15T22:01:27Z", "date_only": false, "value": "2022-08-15T22:01:27Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10087-1", "record": "OPENSUSE-SU-2022:10087-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-08-15T22:01:27Z", "date_only": false, "value": "2022-08-15T22:01:27Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10087-1", "record": "OPENSUSE-SU-2022:10087-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-08-15T22:01:27Z", "date_only": false, "value": "2022-08-15T22:01:27Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10087-1", "record": "OPENSUSE-SU-2022:10087-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-08-15T22:01:27Z", "date_only": false, "value": "2022-08-15T22:01:27Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10087-1", "record": "OPENSUSE-SU-2022:10087-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-08-15T22:01:31Z", "date_only": false, "value": "2022-08-15T22:01:31Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10088-1", "record": "OPENSUSE-SU-2022:10088-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-08-15T22:01:31Z", "date_only": false, "value": "2022-08-15T22:01:31Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10088-1", "record": "OPENSUSE-SU-2022:10088-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-08-15T22:01:31Z", "date_only": false, "value": "2022-08-15T22:01:31Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10088-1", "record": "OPENSUSE-SU-2022:10088-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-08-15T22:01:31Z", "date_only": false, "value": "2022-08-15T22:01:31Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10088-1", "record": "OPENSUSE-SU-2022:10088-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-08-22T16:02:18Z", "date_only": false, "value": "2022-08-22T16:02:18", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.5.date"}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-2294", "field": "timestamps.asserted_at", "uuid": "b4a75922-8ba0-42bf-b698-374611cf6e66", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-2294", "field": "timestamps.asserted_at", "uuid": "0ce36621-e362-4f0e-9e32-5b5fd2f6b3c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": true, "value": "2022-08-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-2294", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-2294", "field": "evidence.0.details.added_date", "uuid": "0ce36621-e362-4f0e-9e32-5b5fd2f6b3c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": true, "value": "2022-08-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-2294", "field": "evidence.0.details.date_added", "uuid": "b4a75922-8ba0-42bf-b698-374611cf6e66", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-2294", "field": "timestamps.first_seen_at", "uuid": "b4a75922-8ba0-42bf-b698-374611cf6e66", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-2294", "field": "timestamps.first_seen_at", "uuid": "0ce36621-e362-4f0e-9e32-5b5fd2f6b3c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-2294", "field": "status.status_updated_at", "uuid": "b4a75922-8ba0-42bf-b698-374611cf6e66", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-2294", "field": "status.status_updated_at", "uuid": "0ce36621-e362-4f0e-9e32-5b5fd2f6b3c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-2294", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-08-29T15:00:04Z", "date_only": false, "value": "2022-08-29T15:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/2398", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "14ad7f57-20ae-479e-8199-30b3e63fca70", "content": "#CVE\n\nWebRTC Heap Buffer Overflow Vulnerability\nCVE-2022-2294\n\nWebRTC, \u043f\u0440\u043e\u0435\u043a\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u043c \u0441\u0432\u044f\u0437\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c shellcode. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 WebRTC, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Google Chrome, \u043d\u043e \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044f\u0441\u044c \u0438\u043c.", "url": "https://t.me/poxek/2398"}, {"timestamp": "2022-09-02T00:00:00Z", "date_only": false, "value": "2022-09-02T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-09-03T13:47:50Z", "date_only": false, "value": "2022-09-03T13:47:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6726", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "f8680f89-a10d-4c1f-9174-27e46957b267", "content": "#exploit\n1. CVE-2022-23597:\nRCE on Element Desktop via NodeIntegration in SubFrames Bypass\nhttps://blog.electrovolt.io/posts/element-rce\n\n2. CVE-2022-2294:\nHeap buffer overflow in WebRTC\nhttps://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-2294.html", "url": "https://t.me/CyberSecurityTechnologies/6726"}, {"timestamp": "2022-09-15T00:00:00Z", "date_only": true, "value": "2022-09-15", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-2294", "field": "evidence.0.details.due_date", "uuid": "b4a75922-8ba0-42bf-b698-374611cf6e66", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-20T22:00:00Z", "date_only": false, "value": "2022-09-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2022-10-06T22:00:00Z", "date_only": false, "value": "2022-10-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2022-10-30T10:05:47Z", "date_only": false, "value": "2022-10-30T10:05:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/1646", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "fe1501c2-f19c-4c3c-b9e2-abba36038aad", "content": "\u200b\u26a1\ufe0f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chrome.\n\n\ud83d\udcac Chrome \u0432\u0435\u0440\u0441\u0438\u0438 107 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0442 Google \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2022-3723, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435. \u0411\u0440\u0435\u0448\u044c \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0435\u0439 \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript Chromium V8. \u0410 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043f\u0440\u043e \u043d\u0435\u0435 25 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Avast.\n\nGoogle \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0435\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043f\u0440\u043e \u0442\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435. \u041d\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e CVE-2022-3723, \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0430\u0441\u043a\u0440\u043e\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431\u043d\u043e\u0432\u0438\u0442 Chrome.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u0443\u0436\u0435 \u0441\u0435\u0434\u044c\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f Google \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443, \u043d\u0438\u0436\u0435 \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d \u043f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a:\n\nCVE-2022-3075 \u2013 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 IPC-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Mojo;\n\nCVE-2022-2856 \u2013 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 Intents;\n\nCVE-2022-2294 \u2013 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebRTC (Web Real-Time Communications);\n\nCVE-2022-1364 \u2013 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript Chrome V8;\n\nCVE-2022-1096 \u2013 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript Chrome V8;\n\nCVE-2022-0609 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0438;\n\nIT-\u0433\u0438\u0433\u0430\u043d\u0442 \u043d\u0435 \u0441\u0442\u0430\u043b \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a \u0438 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u0445 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435.\n\n#Google #Chrome #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/1646"}, {"timestamp": "2022-11-29T00:00:00Z", "date_only": false, "value": "2022-11-29T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-12-30T14:13:30Z", "date_only": false, "value": "2022-12-30T14:13:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/2401", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "ceca531e-6ce7-4236-bf79-16df4cff12a4", "content": "Spyware sold by Israeli company Candiru has been caught exploiting a recently discovered zero-day vulnerability in Google Chrome (CVE-2022-2294) to attack journalists.\n\nRead details: https://thehackernews.com/2022/07/candiru-spyware-caught-exploiting.html", "url": "https://t.me/thehackernews/2401"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "5c3c3e89-9ba9-4b8c-b883-1d7e1d7adad8"}, {"timestamp": "2023-06-21T22:00:00Z", "date_only": false, "value": "2023-06-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-06-21T22:00:00Z", "date_only": false, "value": "2023-06-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0782", "record": "WID-SEC-W-2022-0782", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-07-21T09:03:37Z", "date_only": false, "value": "2023-07-21T09:03:37.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/poxek/2077", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "8be7ffdd-76bd-4bc6-9ea9-8ecac807f826", "content": "Update Google Chrome Browser to Patch New Zero-Day Exploit Detected in the Wild\nThe shortcoming, tracked as CVE-2022-2294, relates to a heap overflow flaw in the WebRTC component that provides real-time audio and video communication capabilities in browsers without the need to install plugins or download native apps.\n\u25b6\ufe0f \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/2077"}, {"timestamp": "2023-09-06T13:44:15Z", "date_only": false, "value": "2023-09-06T13:44:15.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/bd1c3290-9486-4bf9-ae59-fe17c0948133", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "20dee24e-c28e-4e57-a0a3-32e8ad310125"}, {"timestamp": "2023-09-21T09:26:48Z", "date_only": false, "value": "2023-09-21T09:26:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/avleonovrus/35", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "780f35ac-7b25-4d6c-9fe9-8a8285ef59b0", "content": "\u041c\u0430\u0439\u043a\u0440\u043e\u0441\u043e\u0444\u0442 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0442\u0432\u043e\u0440\u044f\u0442 \u0434\u0438\u0447\u044c, \u043d\u043e \u044d\u0442\u043e \u043d\u0435 \u043f\u043e\u0432\u043e\u0434 \u043d\u0435 \u043f\u0430\u0442\u0447\u0438\u0442\u044c \u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b. \u0412\u043e \u0432\u0441\u044f\u043a\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043a\u0430. \u041d\u0443 \u0438 \u0442\u043e\u0447\u043d\u043e \u043d\u0435 \u043f\u043e\u0432\u043e\u0434 \u043d\u0435 \u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \ud83d\ude42 \u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0432\u0438\u0434\u044f\u0448\u043a\u0430 \u043f\u0440\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 Patch Tuesday \u0431\u0443\u0434\u0435\u0442, \u043d\u043e \u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e \u043f\u043e\u0440\u0430\u043d\u044c\u0448\u0435, \u0432\u044b\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e \u0440\u0435\u043f\u043e\u0440\u0442 Vulristics. \u0422\u0435\u043f\u0435\u0440\u044c \u0432\u0441\u0451 \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0435\u0441\u0443 \u0432 \u0442\u0435\u043b\u0435\u0436\u0435\u043d\u044c\u043a\u0443 avleonovrus. \ud83d\ude09\n\n\u0427\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e. \u0421\u0432\u0435\u0440\u0445\u0443 \u0441\u043f\u0438\u0441\u043a\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0432\u0436\u0438\u0432\u0443\u044e Elevation of Privilege \u0432 Windows CSRSS (CVE-2022-22047), \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u0435\u0439\u043d\u0441\u0442\u0440\u0438\u043c\u043d\u044b\u0435 \u043c\u0435\u0434\u0438\u0430 \u043f\u0440\u043e\u0442\u0440\u0443\u0431\u0438\u043b\u0438. \u041c\u043e\u0436\u043d\u043e \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 SYSTEM. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0432\u0438\u0434\u043d\u043e. \n\n\u0414\u0430\u043b\u044c\u0448\u0435 \u043c\u0435\u043d\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. Remote Code Execution \u0432 Remote Procedure Call Runtime (CVE-2022-22038). \u0422\u0443\u0442 \u0443 Microsoft \u0435\u0441\u0442\u044c POC \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. \u041d\u043e \u0432\u0440\u044f\u0434 \u043b\u0438 \u0434\u043e\u0432\u0435\u0434\u0443\u0442 \u0434\u043e \u0447\u0435\u0433\u043e-\u0442\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e, \u0442.\u043a. Exploitation Less Likely. \n\n\u041c\u0435\u0436\u0434\u0443 \u0438\u044e\u043d\u044c\u0441\u043a\u0438\u043c \u0438 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u043c Patch Tuesday \u0432\u044b\u0448\u043b\u0430 Memory Corruption \u0432 Microsoft Edge (CVE-2022-2294), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u0438\u0434\u0438\u043c\u043e \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 RCE \u0438 Google \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \u043e\u043d\u0430 \u0432\u0436\u0438\u0432\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f.   \n\n\u0415\u0449\u0451 \u0437\u0430\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0432 \u044d\u0442\u043e\u043c Patch Tuesday \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u0442\u043e EoP. \u0422\u0430\u043a\u0436\u0435 \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Azure Site Recovery. \u0418 EoP, \u0438 RCE, \u0438 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043c\u043d\u043e\u0433\u043e \u0441 \u043d\u0435\u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430\u043c\u0438 \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0440\u0435\u043b\u043e\u0441\u0442\u0438 POC. \u041f\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e  Azure Site Recovery \u044d\u0442\u043e \"Site Recovery is a native disaster recovery as a service (DRaaS)\", \u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0434\u043e\u043b\u0436\u043d\u043e \u043f\u0430\u0442\u0447\u0438\u0442\u044c\u0441\u044f \u0441\u0430\u043c\u0438\u043c\u0438 Microsoft, \u043d\u043e \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0442\u0430\u043c \u0435\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0445\u043e\u0441\u0442\u0430\u0445 Microsoft Azure Site Recovery suite \u0438 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0447\u0430\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u0442\u043e \u0432 \u043d\u0435\u043c. Tenable \u043f\u0440\u043e CVE-2022-33675 \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e SYSTEM.\n\n@avleonovrus #Microsoft #PatchTuesday #Vulristics", "url": "https://t.me/avleonovrus/35"}, {"timestamp": "2023-09-29T00:00:00Z", "date_only": false, "value": "2023-09-29T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.1.date"}, {"timestamp": "2023-09-29T09:00:00Z", "date_only": false, "value": "2023-09-29T09:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_update_date.data.1.date"}, {"timestamp": "2023-10-21T12:56:55Z", "date_only": false, "value": "2023-10-21T12:56:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/avleonovrus/36", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "fc60ee3a-ebf2-4280-9121-98e842ca656f", "content": "\u0412\u0438\u0434\u044f\u0448\u0435\u0447\u043a\u0430 \u043f\u0440\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 Microsoft Patch Tuesday \u0438 \u043f\u0440\u043e \u0442\u043e, \u0447\u0442\u043e Microsoft \u0442\u0432\u043e\u0440\u0438\u0442 \u0434\u0438\u0447\u044c. \u0412 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0435 \u0432\u0441\u0435 \u0442\u043e \u0436\u0435, \u043e \u0447\u0435\u043c \u0442\u0443\u0442 \u043f\u0438\u0441\u0430\u043b. \u041d\u0443 \u0438 \u043f\u0440\u043e \u0440\u0435\u043f\u043e\u0440\u0442 \u043c\u0430\u0439\u043a\u0440\u043e\u0441\u043e\u0444\u0442\u043e\u0432\u0441\u043a\u0438\u0439 \u0442\u043e\u0436\u0435 \u043d\u0430\u043a\u0438\u043d\u0443\u043b \u043d\u0435\u043c\u043d\u043e\u0436\u043a\u043e \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0430\u0432\u043a\u0438. \ud83d\ude42\n\n\u2014-\n\nHello everyone! Microsoft has been acting weird lately. I mean the recent publication of a propaganda report about evil Russians and how Microsoft is involved in the conflict between countries. It wouldn't be unusual for a US government agency, NSA or CIA to publish such a report. But when a global IT vendor, which, in theory, should be more or less neutral, does this\u2026 This is a clear signal. It's not about business anymore. \n\nI'll take a closer look at this report in the next episode of the Vulnerability Management news, but for now let's take a look at Microsoft July Patch Tuesday. Yes, the vendor is behaving strangely, but Microsoft products need to be patched. Right? At least for now. And tracking vulnerabilities is always a good thing. \ud83d\ude42\n\n01:32 CSRSS Elevation of Privilege (CVE-2022-22047)\n04:36 RPC Remote Code Execution (CVE-2022-22038)\n05:44 Microsoft Edge Memory Corruption (CVE-2022-2294)\n06:55 32 vulnerabilities in Azure Site Recovery\n\nVideo: https://youtu.be/HjfxxcqWrH4\nVideo2 (for Russia): https://vk.com/video-149273431_456239096\nBlogpost: https://avleonov.com/2022/07/23/microsoft-patch-tuesday-july-2022-propaganda-report-csrss-eop-rpc-rce-edge-azure-site-recovery/\nFull report: https://avleonov.com/vulristics_reports/ms_patch_tuesday_july2022_report_with_comments_ext_img.html\n\n@avleonovrus #microsoft #patchtuesday", "url": "https://t.me/avleonovrus/36"}, {"timestamp": "2023-11-25T11:06:49.314Z", "date_only": false, "value": "2023-11-25T11:06:49.314Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Chrome", "record": "CVE-2022-2294", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-11-25T11:15:00Z", "date_only": false, "value": "2023-11-25T11:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-2294", "record": "GSD-2022-2294", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-25T17:01:13Z", "date_only": false, "value": "2023-11-25T17:01:13", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.8.date"}, {"timestamp": "2023-12-13T01:19:19.906Z", "date_only": false, "value": "2023-12-13T01:19:19.906570Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-2294", "record": "GSD-2022-2294", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-16T20:58:09Z", "date_only": false, "value": "2024-01-16T20:58:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2882", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "134a9cc2-2a49-46db-aab6-6bad9a19f1cf", "content": "#ExploitObserverAlert\n\nCVE-2022-2294\n\nDESCRIPTION: Exploit Observer has 27 entries in 3 file formats related to CVE-2022-2294. Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n\nFIRST-EPSS: 0.006130000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/2882"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12180-1", "record": "OPENSUSE-SU-2024:12180-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12395-1", "record": "OPENSUSE-SU-2024:12395-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12180-1", "record": "OPENSUSE-SU-2024:12180-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12395-1", "record": "OPENSUSE-SU-2024:12395-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12180-1", "record": "OPENSUSE-SU-2024:12180-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12395-1", "record": "OPENSUSE-SU-2024:12395-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12180-1", "record": "OPENSUSE-SU-2024:12180-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12395-1", "record": "OPENSUSE-SU-2024:12395-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-28T14:08:30.807Z", "date_only": false, "value": "2024-06-28T14:08:30.807000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_update_date.data.3.date"}, {"timestamp": "2024-07-23T19:21:02.318Z", "date_only": false, "value": "2024-07-23T19:21:02.318000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "last_update_date"}, {"timestamp": "2024-08-03T00:32:09.581Z", "date_only": false, "value": "2024-08-03T00:32:09.581Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-2294", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:32:55.060Z", "date_only": false, "value": "2024-12-24T20:32:55.060724Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971693", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "a67fb1ec-624b-4f43-b7b5-f8873335d4ce", "url": "https://feedsin.space/feed/CISAKevBot/items/2971693"}, {"timestamp": "2025-02-06T02:39:17Z", "date_only": false, "value": "2025-02-06T02:39:17.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/l5uto4RTTVtNTCXQW2FGYRiamjp1g6VC6GGax2xyWPBA5lja", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "5c100ed9-338d-4935-95bd-0d58dd4c5af0"}, {"timestamp": "2025-02-23T02:10:34Z", "date_only": false, "value": "2025-02-23T02:10:34.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "d219c586-4eee-4622-95b7-b7b42a8b9556"}, {"timestamp": "2025-10-20T22:00:00Z", "date_only": false, "value": "2025-10-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2025-10-20T22:00:00Z", "date_only": false, "value": "2025-10-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0782", "record": "WID-SEC-W-2022-0782", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-10-20T22:00:00Z", "date_only": false, "value": "2025-10-20T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-20T22:00:00Z", "date_only": false, "value": "2025-10-20T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0782", "record": "WID-SEC-W-2022-0782", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-21T08:23:25.439Z", "date_only": false, "value": "2025-10-21T08:23:25.439+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0782", "record": "WID-SEC-W-2022-0782", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-21T08:28:29.099Z", "date_only": false, "value": "2025-10-21T08:28:29.099+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-22T00:32:34Z", "date_only": false, "value": "2025-10-22T00:32:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9Q96-CWQ7-CR4M", "record": "GHSA-9Q96-CWQ7-CR4M", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-2294", "field": "timestamps.recorded_at", "uuid": "b4a75922-8ba0-42bf-b698-374611cf6e66", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:27:15.257Z", "date_only": false, "value": "2026-02-02T12:27:15.257191Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b4a75922-8ba0-42bf-b698-374611cf6e66", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "e46ae1f0-cf12-468a-b26d-f1b7e867694f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b4a75922-8ba0-42bf-b698-374611cf6e66"}, {"timestamp": "2026-04-22T07:41:14Z", "date_only": false, "value": "2026-04-22T07:41:14Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-2294", "record": "UBUNTU-CVE-2022-2294", "field": "modified"}, {"timestamp": "2026-06-19T12:47:05.640Z", "date_only": false, "value": "2026-06-19T12:47:05.640894Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a1cf61ae-7d33-4087-aa9e-47848ef2fa25", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "0f0ec7af-d4e4-4866-a38e-ea16d4787f56", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a1cf61ae-7d33-4087-aa9e-47848ef2fa25"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-2294", "field": "timestamps.recorded_at", "uuid": "0ce36621-e362-4f0e-9e32-5b5fd2f6b3c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:31.891Z", "date_only": false, "value": "2026-06-23T14:05:31.891626Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0ce36621-e362-4f0e-9e32-5b5fd2f6b3c7", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "68c19a5d-7640-4883-ab87-5b9af9ca4d26", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0ce36621-e362-4f0e-9e32-5b5fd2f6b3c7"}, {"timestamp": "2026-07-12T22:00:16.239Z", "date_only": false, "value": "2026-07-12T22:00:16.239832Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/10100", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "5d36150d-98b9-483c-8c9e-475868173137", "content": "\u2757\ufe0fGoogle libera versi\u00f3n 103.0.5060.114 de Chrome para Windows, para corregir una #vulnerabilidad tipo #zeroday (CVE-2022-2294) de alta gravedad.\nhttps://bit.ly/3IbHX4F", "url": "https://t.me/pleyades_it/10100"}, {"timestamp": "2026-07-26T02:02:50.441Z", "date_only": false, "value": "2026-07-26T02:02:50.441284Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/470", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "4a18422b-4842-474a-bda3-e35e5520e57a", "content": "Apple \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u044e\u0436\u0438\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041f\u041e\n\n\u0412 \u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u043d\u0434\u043e\u0440 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 37 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 iOS, iPadOS, maOS, tvOS \u0438 watchOS. \u041e\u0448\u0438\u0431\u043a\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u0438 \u0434\u0440.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2022-2294, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebRTC. \u0420\u0430\u043d\u0435\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Google \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0430\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u043e\u043e\u0431\u0449\u0438\u0432, \u0447\u0442\u043e \u043e\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 Chrome. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0435\u0442 \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u043c\u0443, \u0447\u0442\u043e\u0431\u044b \u044d\u0442\u043e\u0442 \u0436\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 iOS, macOS \u0438 Safari.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u2013 \u043e\u0448\u0438\u0431\u043a\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u0432 Apple Neural Engine (CVE-2022-32810, CVE-2022-32829 \u0438 CVE-2022-32840), \u0430\u0443\u0434\u0438\u043e (CVE-2022-32820), \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 GPU (CVE-2022-32821), ImageIO (CVE-2022-32802), IOMobileFrameBuffer (CVE-2022-26768), \u044f\u0434\u0440\u0435 (CVE-2022-32813 \u0438 CVE-2022-32815) \u0438 WebKit (CVE-2022- 32792).\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043d\u0438 \u0432\u043b\u0438\u044f\u044e\u0442, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Apple.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.apple.com/en-us/HT201222\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Apple", "url": "https://t.me/EchelonEyes/470"}, {"timestamp": "2026-07-26T02:02:51.904Z", "date_only": false, "value": "2026-07-26T02:02:51.904495Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/419", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "9053ea0c-9617-4bfd-95a4-706a8fc9f106", "content": "Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0432 Chrome \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome \u0434\u043b\u044f Windows - 103.0.5060.114, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2022-2294.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 heap-based buffer overflow \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebRTC (\u0432\u0435\u0431-\u0441\u0432\u044f\u0437\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438). \u0415\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0441\u0431\u043e\u044e \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u043d\u0435 \u0434\u0435\u043b\u0438\u0442\u0441\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u043f\u043e\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u0441\u044f, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043b\u0438 \u044d\u0442\u0430 \u0436\u0435 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0435\u0449\u0435 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b.\n\nCVE-2022-2294 \u2013 \u044d\u0442\u043e \u0443\u0436\u0435 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 Chrome \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Chrome", "url": "https://t.me/EchelonEyes/419"}, {"timestamp": "2026-07-26T07:01:08.652Z", "date_only": false, "value": "2026-07-26T07:01:08.652897Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/615", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "9662db96-1a5b-479c-8cef-d75386db5e61", "content": "CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e 10 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041a\u0430\u0442\u0430\u043b\u043e\u0433\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0421\u0428\u0410 (CISA) \u0432\u043d\u043e\u0432\u044c \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u043e \u041a\u0430\u0442\u0430\u043b\u043e\u0433 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u043f\u043e\u043b\u043d\u0438\u0432 \u0435\u0433\u043e \u0435\u0449\u0435 10 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2013 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442 Delta Electronics. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2021-38406 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,8), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041f\u041e \u0434\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043d\u0435\u043b\u0435\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u2013 DOPSoft 2 \u0432\u0435\u0440\u0441\u0438\u0438 2.00.07 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u0434\u0430\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435\u0442. \u041e\u0434\u043d\u0430\u043a\u043e CISA \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u00ab\u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 \u0443\u0441\u0442\u0430\u0440\u0435\u043b \u0438 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d, \u0435\u0441\u043b\u0438 \u043e\u043d \u0432\u0441\u0435 \u0435\u0449\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f\u00bb.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433:\n\nCVE-2022-26352 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c dotCMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432.\nCVE-2022-24706 \u2014 \u041d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 Apache CouchDB \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\nCVE-2022-24112 \u2014 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Apache APISIX.\nCVE-2022-22963 \u2014 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c VMware Tanzu Spring Cloud, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\nCVE-2022-2294 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c WebRTC, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438.\nCVE-2021-39226 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Grafana.\nCVE-2020-36193 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PEAR Archive_Tar, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u0441\u0441\u044b\u043b\u043e\u043a.\nCVE-2020-28949 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PEAR Archive_Tar, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u041a\u0430\u0442\u0430\u043b\u043e\u0433 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c iOS \u0438 macOS, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2021-31010 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5). \u042d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Apple Core Telephony, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b. \u0412\u0435\u043d\u0434\u043e\u0440 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0430\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0435\u0449\u0435 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2021, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0430\u043b, \u0447\u0442\u043e \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0432 \u043c\u0430\u0435 2022 \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b \u0441\u0432\u043e\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://thehackernews.com/2022/08/cisa-adds-10-new-known-actively.html \n\n#CISA #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "url": "https://t.me/EchelonEyes/615"}, {"timestamp": "2026-07-28T13:00:04.957Z", "date_only": false, "value": "2026-07-28T13:00:04.957061Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/419", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "85041136-1bc5-426f-bb38-2ca9d1be3758", "content": "Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0432 Chrome \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome \u0434\u043b\u044f Windows - 103.0.5060.114, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2022-2294.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 heap-based buffer overflow \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebRTC (\u0432\u0435\u0431-\u0441\u0432\u044f\u0437\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438). \u0415\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0441\u0431\u043e\u044e \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u043d\u0435 \u0434\u0435\u043b\u0438\u0442\u0441\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u043f\u043e\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u0441\u044f, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043b\u0438 \u044d\u0442\u0430 \u0436\u0435 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0435\u0449\u0435 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b.\n\nCVE-2022-2294 \u2013 \u044d\u0442\u043e \u0443\u0436\u0435 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 Chrome \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Chrome", "url": "https://t.me/EchelonEyes/419"}, {"timestamp": "2026-08-04T03:55:43.075Z", "date_only": false, "value": "2026-08-04T03:55:43.075Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-2294", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-04T03:55:43.075Z", "date_only": false, "value": "2026-08-04T03:55:43.075Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-2294", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-04T05:16:28.260Z", "date_only": false, "value": "2026-08-04T05:16:28.260", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2294", "record": "FKIE_CVE-2022-2294", "field": "lastModified"}, {"timestamp": "2026-08-04T08:01:36.962Z", "date_only": false, "value": "2026-08-04T08:01:36.962119Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msakc7byjl2n", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "48a2f82a-7e5c-4835-8885-3e8da1def1a3", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2022-2294: Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially ex\u2026\nCVSS 8.8 \u00b7 EPSS 70.5% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2022-2294\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3msakc7byjl2n"}, {"timestamp": "2026-09-01T17:00:11.015Z", "date_only": false, "value": "2026-09-01T17:00:11.015378Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/596", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "773125d6-1036-493b-8357-7a4b9ade9149", "content": "\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 Google Chrome, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435\n______________________________\n\nGoogle \u0432 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0441\u0432\u043e\u0435\u043c \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u043a\u0430\u043a CVE-2022-2294 , \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebRTC , \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0430\u0443\u0434\u0438\u043e- \u0438 \u0432\u0438\u0434\u0435\u043e\u0441\u0432\u044f\u0437\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0438\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n1 \u0438\u044e\u043b\u044f 2022 \u0433\u043e\u0434\u0430 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u042f\u043d \u0412\u043e\u0439\u0442\u0435\u0441\u0435\u043a \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Avast Threat Intelligence. \u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u044e Chrome \u0434\u043b\u044f Android. \n\nhttps://shly.link/ZCbgd", "url": "https://t.me/Hackme_news/596"}, {"timestamp": "2026-09-01T17:00:26.562Z", "date_only": false, "value": "2026-09-01T17:00:26.562297Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6020", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "5ad97778-e2ea-47d5-8fc1-9dd8d7f8623c", "content": "Malware analysis\n\n1. Lightning Framework: New Undetected \"Swiss Army Knife\" Linux Malware\nhttps://www.intezer.com/blog/research/lightning-framework-new-linux-threat\n\n2. Analyzing Penetration-Testing Tools That Threat Actors Use to Breach Systems and Steal Data\nhttps://www.trendmicro.com/en_us/research/22/g/analyzing-penetration-testing-tools-that-threat-actors-use-to-br.html\n\n3.Spyware sold by Israeli company Candiru has been caught exploiting a recently discovered zero-day vulnerability in Google Chrome (CVE-2022-2294) to attack journalists.\nRead details: https://thehackernews.com/2022/07/candiru-spyware-caught-exploiting.html", "url": "https://t.me/cissp/6020"}, {"timestamp": "2026-09-01T17:00:28.189Z", "date_only": false, "value": "2026-09-01T17:00:28.189250Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/5977", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "25a471d4-89c7-454d-a198-9c1a41515a1d", "content": "UPDATE your Google Chrome browser for Windows, macOS, Linux and Android devices to patch a newly discovered high-severity zero-day vulnerability (CVE-2022-2294) that is being exploited in the wild.\nDetails: https://thehackernews.com/2022/07/update-google-chrome-browser-to-patch.html\n\nResearchers have uncovered a new widespread supply-chain attack campaign distributing malicious NPM packages designed to steal sensitive data from forms embedded in mobile apps and websites.\nDetails: https://thehackernews.com/2022/07/researchers-uncover-malicious-npm.html", "url": "https://t.me/cissp/5977"}, {"timestamp": "2026-09-01T20:01:15.781Z", "date_only": false, "value": "2026-09-01T20:01:15.781062Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/77727", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "72dad84c-c692-46c3-9c7c-c78f76ca678c", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix 8th zero-day this year\n\nGoogle pushes emergency Chrome update to fix 8th zero-day this yearPost Views: 10 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Google has released an emergency security update for the desktop version of the Chrome web browser, addressing the eighth zero-day vulnerability exploited in attacks this year.The high-severity flaw is tracked as CVE-2022-4135 and is a heap buffer overflow in GPU, discovered by Clement Lecigne of Google\u2019s Threat Analysis Group on November 22, 2022.\n\n\u201cGoogle is aware that an exploit for CVE-2022-4135 exists in the wild,\u201d reads the update notice.\n\nAs users need time to apply the security update on their Chrome installations, Google has withheld details about the vulnerability to prevent expanding its malicious exploitation.\nAccess to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven\u2019t yet fixed. \u2013 Google\nIn general, heap buffer overflow is a memory vulnerability resulting in data being written to forbidden (usually adjacent) locations without check.\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course\nAttackers may use heap buffer overflow to overwrite an application\u2019s memory to manipulate its execution path, resulting in unrestricted information access or arbitrary code execution.\n\nChrome users are recommended to upgrade to version 107.0.5304.121/122 for Windows and 107.0.5304.122 for Mac and Linux, which addresses CVE-2022-4135.\n\nTo update Chrome, head to Settings \u2192 About Chrome \u2192 Wait for the download of the latest version to finish \u2192 Restart the program.\nhttps://www.bleepstatic.com/images/news/u/1220909/Software/Update.png \nChrome\u2019s eighth zero-day fix in 2022Chrome version 107.0.5304.121/122 fixes the eighth actively exploited zero-day vulnerability this year, indicating the high interest of attackers against the widely used browser.\n\nThe previous seven zero-day fixes are:\n\n* CVE-2022-3723\u00a0\u2013 October 28th\n* CVE-2022-3075\u00a0\u2013 September 2nd\n* CVE-2022-2856\u00a0\u2013 August 17th\n* CVE-2022-2294\u00a0\u2013 July 4th\n* CVE-2022-1364\u00a0\u2013 April 14th\n* CVE-2022-1096\u00a0\u2013 March 25th\n* CVE-2022-0609\u00a0\u2013 February 14th\n\nThese flaws are typically leveraged by sophisticated hackers\u00a0who use them in highly targeted attacks.\n\nNevertheless, all Chrome users are strongly advised to update their web browsers as soon as possible to block potential exploitation attempts.\nTrending: Windows Kerberos authentication breaks after November updates\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-8-2-300x150.png Fake MSI Afterburner targets Windows gamers with miners, info-stealersNovember 24, 2022\nReading Time: 4 minutes\n\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-7-1-300x[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/77727"}, {"timestamp": "2026-09-05T04:00:04.003Z", "date_only": false, "value": "2026-09-05T04:00:04.003863Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/77727", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "75b5b815-b7ce-4b98-a085-eb3c756e1a5a", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix 8th zero-day this year\n\nGoogle pushes emergency Chrome update to fix 8th zero-day this yearPost Views: 10 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Google has released an emergency security update for the desktop version of the Chrome web browser, addressing the eighth zero-day vulnerability exploited in attacks this year.The high-severity flaw is tracked as CVE-2022-4135 and is a heap buffer overflow in GPU, discovered by Clement Lecigne of Google\u2019s Threat Analysis Group on November 22, 2022.\n\n\u201cGoogle is aware that an exploit for CVE-2022-4135 exists in the wild,\u201d reads the update notice.\n\nAs users need time to apply the security update on their Chrome installations, Google has withheld details about the vulnerability to prevent expanding its malicious exploitation.\nAccess to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven\u2019t yet fixed. \u2013 Google\nIn general, heap buffer overflow is a memory vulnerability resulting in data being written to forbidden (usually adjacent) locations without check.\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course\nAttackers may use heap buffer overflow to overwrite an application\u2019s memory to manipulate its execution path, resulting in unrestricted information access or arbitrary code execution.\n\nChrome users are recommended to upgrade to version 107.0.5304.121/122 for Windows and 107.0.5304.122 for Mac and Linux, which addresses CVE-2022-4135.\n\nTo update Chrome, head to Settings \u2192 About Chrome \u2192 Wait for the download of the latest version to finish \u2192 Restart the program.\nhttps://www.bleepstatic.com/images/news/u/1220909/Software/Update.png \nChrome\u2019s eighth zero-day fix in 2022Chrome version 107.0.5304.121/122 fixes the eighth actively exploited zero-day vulnerability this year, indicating the high interest of attackers against the widely used browser.\n\nThe previous seven zero-day fixes are:\n\n* CVE-2022-3723\u00a0\u2013 October 28th\n* CVE-2022-3075\u00a0\u2013 September 2nd\n* CVE-2022-2856\u00a0\u2013 August 17th\n* CVE-2022-2294\u00a0\u2013 July 4th\n* CVE-2022-1364\u00a0\u2013 April 14th\n* CVE-2022-1096\u00a0\u2013 March 25th\n* CVE-2022-0609\u00a0\u2013 February 14th\n\nThese flaws are typically leveraged by sophisticated hackers\u00a0who use them in highly targeted attacks.\n\nNevertheless, all Chrome users are strongly advised to update their web browsers as soon as possible to block potential exploitation attempts.\nTrending: Windows Kerberos authentication breaks after November updates\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-8-2-300x150.png Fake MSI Afterburner targets Windows gamers with miners, info-stealersNovember 24, 2022\nReading Time: 4 minutes\n\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-7-1-300x[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/77727"}, {"timestamp": "2026-09-09T01:00:04.548Z", "date_only": false, "value": "2026-09-09T01:00:04.548757Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Hackme_news/596", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "ac63aa67-b5ee-4e42-bf2d-49f6e80ccb83", "content": "\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 Google Chrome, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435\n______________________________\n\nGoogle \u0432 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0441\u0432\u043e\u0435\u043c \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u043a\u0430\u043a CVE-2022-2294 , \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebRTC , \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0430\u0443\u0434\u0438\u043e- \u0438 \u0432\u0438\u0434\u0435\u043e\u0441\u0432\u044f\u0437\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0438\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n1 \u0438\u044e\u043b\u044f 2022 \u0433\u043e\u0434\u0430 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u042f\u043d \u0412\u043e\u0439\u0442\u0435\u0441\u0435\u043a \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Avast Threat Intelligence. \u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u044e Chrome \u0434\u043b\u044f Android. \n\nhttps://shly.link/ZCbgd", "url": "https://t.me/Hackme_news/596"}, {"timestamp": "2026-09-10T07:00:04.037Z", "date_only": false, "value": "2026-09-10T07:00:04.037132Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/6020", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "a87f9474-a44c-40c3-b05d-5a6616094294", "content": "Malware analysis\n\n1. Lightning Framework: New Undetected \"Swiss Army Knife\" Linux Malware\nhttps://www.intezer.com/blog/research/lightning-framework-new-linux-threat\n\n2. Analyzing Penetration-Testing Tools That Threat Actors Use to Breach Systems and Steal Data\nhttps://www.trendmicro.com/en_us/research/22/g/analyzing-penetration-testing-tools-that-threat-actors-use-to-br.html\n\n3.Spyware sold by Israeli company Candiru has been caught exploiting a recently discovered zero-day vulnerability in Google Chrome (CVE-2022-2294) to attack journalists.\nRead details: https://thehackernews.com/2022/07/candiru-spyware-caught-exploiting.html", "url": "https://t.me/cissp/6020"}, {"timestamp": "2026-09-10T08:00:05.963Z", "date_only": false, "value": "2026-09-10T08:00:05.963476Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/5977", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "202c259f-b6a0-4408-a7de-06d436eb2f5a", "content": "UPDATE your Google Chrome browser for Windows, macOS, Linux and Android devices to patch a newly discovered high-severity zero-day vulnerability (CVE-2022-2294) that is being exploited in the wild.\nDetails: https://thehackernews.com/2022/07/update-google-chrome-browser-to-patch.html\n\nResearchers have uncovered a new widespread supply-chain attack campaign distributing malicious NPM packages designed to steal sensitive data from forms embedded in mobile apps and websites.\nDetails: https://thehackernews.com/2022/07/researchers-uncover-malicious-npm.html", "url": "https://t.me/cissp/5977"}, {"timestamp": "2026-09-20T19:41:51Z", "date_only": false, "value": "2026-09-20T19:41:51Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10055-1", "record": "OPENSUSE-SU-2022:10055-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:41:51Z", "date_only": false, "value": "2026-09-20T19:41:51Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10055-1", "record": "OPENSUSE-SU-2022:10055-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:41:52Z", "date_only": false, "value": "2026-09-20T19:41:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10057-1", "record": "OPENSUSE-SU-2022:10057-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:41:52Z", "date_only": false, "value": "2026-09-20T19:41:52Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10057-1", "record": "OPENSUSE-SU-2022:10057-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:42:04Z", "date_only": false, "value": "2026-09-20T19:42:04Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10087-1", "record": "OPENSUSE-SU-2022:10087-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:42:04Z", "date_only": false, "value": "2026-09-20T19:42:04Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10087-1", "record": "OPENSUSE-SU-2022:10087-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:42:05Z", "date_only": false, "value": "2026-09-20T19:42:05Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10088-1", "record": "OPENSUSE-SU-2022:10088-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:42:05Z", "date_only": false, "value": "2026-09-20T19:42:05Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10088-1", "record": "OPENSUSE-SU-2022:10088-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:33:21Z", "date_only": false, "value": "2026-09-20T20:33:21Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12180-1", "record": "OPENSUSE-SU-2024:12180-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:33:21Z", "date_only": false, "value": "2026-09-20T20:33:21Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12180-1", "record": "OPENSUSE-SU-2024:12180-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:37:45Z", "date_only": false, "value": "2026-09-20T20:37:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12395-1", "record": "OPENSUSE-SU-2024:12395-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:37:45Z", "date_only": false, "value": "2026-09-20T20:37:45Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12395-1", "record": "OPENSUSE-SU-2024:12395-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:50:05Z", "date_only": false, "value": "2026-09-20T20:50:05Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-01T07:53:31.843Z", "date_only": false, "value": "2026-10-01T07:53:31.843469Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2024-LO80114", "record": "CLEANSTART-2024-LO80114", "field": "published"}, {"timestamp": "2026-10-08T14:25:07Z", "date_only": false, "value": "2026-10-08T14:25:07Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2024-LO80114", "record": "CLEANSTART-2024-LO80114", "field": "modified"}, {"timestamp": "2026-10-18T10:26:10Z", "date_only": false, "value": "2026-10-18T10:26:10Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-18T10:26:10Z", "date_only": false, "value": "2026-10-18T10:26:10Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.current_release_date"}]}