{"metadata": {"vulnerability": "cve-2022-2294", "count": 179, "kinds": {"milestone": 19, "sighting": 55, "kev": 11, "other": 94}}, "data": [{"timestamp": "2022-07-03T00:00:00Z", "date_only": false, "value": "2022-07-03T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-2294", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-07-04T00:00:00Z", "date_only": false, "value": "2022-07-04T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.9.date"}, {"timestamp": "2022-07-05T00:00:00Z", "date_only": false, "value": "2022-07-05T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-609", "record": "CERTFR-2022-AVI-609", "field": "last_revision_date"}, {"timestamp": "2022-07-05T00:00:00Z", "date_only": false, "value": "2022-07-05T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-609", "record": "CERTFR-2022-AVI-609", "field": "initial_release_date"}, {"timestamp": "2022-07-05T00:00:00Z", "date_only": false, "value": "2022-07-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-609", "record": "CERTFR-2022-AVI-609", "field": "revisions.0.revision_date"}, {"timestamp": "2022-07-05T04:00:00Z", "date_only": false, "value": "2022-07-05T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=828", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "35a86c18-0d88-4706-b604-e7a0729da11a", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=828"}, {"timestamp": "2022-07-05T04:57:49Z", "date_only": false, "value": "2022-07-05T04:57:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/2341", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "eedc7047-ddc3-4bc7-8009-bcb658d563e6", "content": "UPDATE your Google Chrome browser for Windows, macOS, Linux and Android devices to patch a newly discovered high-severity zero-day vulnerability (CVE-2022-2294) that is being exploited in the wild.\n\nDetails: https://thehackernews.com/2022/07/update-google-chrome-browser-to-patch.html", "url": "https://t.me/thehackernews/2341"}, {"timestamp": "2022-07-05T06:27:47Z", "date_only": false, "value": "2022-07-05T06:27:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/1587", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "55e0db88-d483-44b1-9114-0ed1ac35ff39", "content": "Google patched security issues in Chrome for Android, one of the exploit exists in the wild (CVE-2022-2294, CVE-2022-2295)\nhttps://chromereleases.googleblog.com/2022/07/chrome-for-android-update.html", "url": "https://t.me/androidMalware/1587"}, {"timestamp": "2022-07-05T09:35:16Z", "date_only": false, "value": "2022-07-05T09:35:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/942", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "8c7cb097-9108-45ac-bb78-9ebf7fc089c7", "content": "\u200b\u26a1\ufe0f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0430\u0436\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435: \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u0430\u044f 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome.\n\n\ud83d\udcac \u0412 \u0441\u0432\u0435\u0436\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043e\u043f\u0430\u0441\u043d\u0443\u044e 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435. \u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2022-2294, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebRTC.\n\n0-day \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u042f\u043d \u0412\u043e\u0436\u0442\u0435\u0441\u0435\u043a, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Avast Threat Intelligence. Google \u043d\u0435 \u0441\u0442\u0430\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u0441\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0435\u0435 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435. \u0421\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0445\u043e\u0447\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\nCVE-2022-2294 \u0441\u0442\u0430\u043b\u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u0439 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome. \u0414\u043e \u043d\u0435\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c CVE-2022-0609, CVE-2022-1096 \u0438 CVE-2022-1364.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b  \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 103.0.5060.114 \u043d\u0430 \u0432\u0441\u0435\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e \u043c\u0435\u0440\u0435 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f.\n\n#Google #0day #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #GoogleChrome #\u041a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/942"}, {"timestamp": "2022-07-05T11:15:46Z", "date_only": false, "value": "2022-07-05T11:15:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/3130", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "f5e0b06a-d482-4886-90c0-38865c375842", "content": "Google \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u044b\u0439 \u0437\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u0433\u043e\u0434 0-day \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f 103.0.5060.114 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0432 \u043a\u0430\u043d\u0430\u043b\u0435 Stable Desktop \u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2022-2294, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0421\u043f\u0435\u0448\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u00a0\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u0443\u0447\u0438\u00a0\u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebRTC, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 01 \u0438\u044e\u043b\u044f \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u042f\u043d \u0412\u043e\u0439\u0442\u0435\u0441\u0435\u043a \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Avast Threat Intelligence. \u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0430\u0440\u044c\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 RCE \u0434\u043e \u043e\u0431\u0445\u043e\u0434\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a CVE-2022-2294 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b: CVE-2022-2295, \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0443 \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8, \u0438 CVE-2022-2296, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 Chrome OS.\n\n\u0412 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 103 (103.0.5060.71) \u0434\u043b\u044f Android \u0441\u043a\u043e\u0440\u043e \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0438 \u043d\u0430 Google Play.\n\n\u0414\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043e\u0440\u0433\u0430\u043d\u0438\u0447\u0435\u043d \u0434\u043e \u0442\u0435\u0445, \u043f\u043e\u0440 \u043f\u043e\u043a\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u043d\u0430\u043a\u0430\u0442\u044f\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0441 \u0447\u0435\u043c \u043c\u044b \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0437\u0430\u0442\u044f\u0433\u0438\u0432\u0430\u0442\u044c.", "url": "https://t.me/true_secator/3130"}, {"timestamp": "2022-07-05T11:38:18Z", "date_only": false, "value": "2022-07-05T11:38:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/alexmakus/4742", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "a4595d7a-95bf-47cb-958a-8e7ae2deda77", "content": "\u0422\u0430\u043c \u043d\u0443\u0436\u043d\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Chrome \u043f\u043e\u0434 Windows - CVE-2022-2294 \u044f\u043a\u043e\u0431\u044b \u043c\u043e\u0436\u0435\u0442 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f. \u0422\u0430\u043c \u0440\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 WebRTC, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u044d\u0444\u0444\u0435\u043a\u0442\u0430\u043c \u043e\u0442 \u043f\u0430\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043e \u043e\u0431\u0445\u043e\u0434\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b. \u0414\u0435\u0442\u0430\u043b\u0435\u0439 \u043f\u0440\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e Google \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442. \u042d\u0442\u043e \u0443\u0436\u0435 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443. \n\n\nhttps://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_25.html", "url": "https://t.me/alexmakus/4742"}, {"timestamp": "2022-07-06T00:00:00Z", "date_only": true, "value": "2022-07-06", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-49948", "record": "CNVD-2022-49948", "field": "submitTime"}, {"timestamp": "2022-07-06T02:02:08Z", "date_only": false, "value": "2022-07-06T02:02:08.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cyberbannews_ir/6182", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "11085de4-7c0f-4d43-8c37-b247ad58f84f", "content": "\ud83d\uded1\u0627\u0635\u0644\u0627\u062d \u0686\u0647\u0627\u0631\u0645\u06cc\u0646 \u0628\u0627\u06af \u0627\u0645\u0646\u06cc\u062a\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645 \u062f\u0631 \u0633\u0627\u0644 2022\n\n \u06af\u0648\u06af\u0644 \u0628\u0627 \u0647\u062f\u0641 \u0627\u0635\u0644\u0627\u062d \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632 \u0635\u0641\u0631 \u062c\u062f\u06cc\u060c \u0646\u0633\u062e\u0647 103.0.5060.114 \u06a9\u0631\u0648\u0645 \u0631\u0627 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0645\u0648\u0631\u062f \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u0647\u0627\u062c\u0645\u06cc\u0646 \u0642\u0631\u0627\u0631 \u062f\u0627\u0634\u062a\u060c \u0686\u0647\u0627\u0631\u0645\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0635\u0644\u0627\u062d \u0634\u062f\u0647 \u06a9\u0631\u0648\u0645 \u062f\u0631 \u0633\u0627\u0644 2022 \u0627\u0633\u062a.\n\n\u06af\u0648\u06af\u0644 \u0627\u0632 \u0648\u062c\u0648\u062f \u06a9\u062f\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 CVE-2022-2294 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0645\u0637\u0644\u0639 \u0627\u0633\u062a. \n\n#\u0627\u0645\u0646\u06cc\u062a_\u0648\u0628\n\n\u2705 \u0628\u06cc\u0634\u062a\u0631 \u0628\u062e\u0648\u0627\u0646\u06cc\u062f:\nhttps://bit.ly/3AtVMcH\n\n@cyberbannews_ir", "url": "https://t.me/cyberbannews_ir/6182"}, {"timestamp": "2022-07-06T11:04:09Z", "date_only": false, "value": "2022-07-06T11:04:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/secmedia/466", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "ccc89c76-15f7-4194-beda-6b472542ee55", "content": "\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u043e\u043c 103.0.5060.114. \u0415\u0433\u043e \u0432\u043d\u0435\u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0432\u044b\u0445\u043e\u0434 \u043f\u0440\u0438\u0437\u0432\u0430\u043d \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-2294, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.", "url": "https://t.me/secmedia/466"}, {"timestamp": "2022-07-07T00:00:00Z", "date_only": false, "value": "2022-07-07T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-616", "record": "CERTFR-2022-AVI-616", "field": "last_revision_date"}, {"timestamp": "2022-07-07T00:00:00Z", "date_only": true, "value": "2022-07-07", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-49948", "record": "CNVD-2022-49948", "field": "openTime"}, {"timestamp": "2022-07-07T00:00:00Z", "date_only": false, "value": "2022-07-07T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-616", "record": "CERTFR-2022-AVI-616", "field": "initial_release_date"}, {"timestamp": "2022-07-07T00:00:00Z", "date_only": false, "value": "2022-07-07T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-616", "record": "CERTFR-2022-AVI-616", "field": "revisions.0.revision_date"}, {"timestamp": "2022-07-07T04:00:00Z", "date_only": false, "value": "2022-07-07T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=829", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "acf67ed1-6ca5-4538-ad18-f66443386f5e", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=829"}, {"timestamp": "2022-07-08T21:58:31Z", "date_only": false, "value": "2022-07-08T21:58:31.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MrVGunz/313", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "579b62e0-5b59-4674-aa20-e46ddd22dc33", "content": "UPDATE your Google Chrome browser for Windows, macOS, Linux and Android devices to patch a newly discovered high-severity zero-day vulnerability (CVE-2022-2294) that is being exploited in the wild.\n\nDetails: https://thehackernews.com/2022/07/update-google-chrome-browser-to-patch.html", "url": "https://t.me/MrVGunz/313"}, {"timestamp": "2022-07-12T22:21:58Z", "date_only": false, "value": "2022-07-12T22:21:58Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10055-1", "record": "OPENSUSE-SU-2022:10055-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-07-12T22:21:58Z", "date_only": false, "value": "2022-07-12T22:21:58Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10055-1", "record": "OPENSUSE-SU-2022:10055-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-07-12T22:21:58Z", "date_only": false, "value": "2022-07-12T22:21:58Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10055-1", "record": "OPENSUSE-SU-2022:10055-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-07-12T22:21:58Z", "date_only": false, "value": "2022-07-12T22:21:58Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10055-1", "record": "OPENSUSE-SU-2022:10055-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-07-13T12:10:33Z", "date_only": false, "value": "2022-07-13T12:10:33Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10057-1", "record": "OPENSUSE-SU-2022:10057-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-07-13T12:10:33Z", "date_only": false, "value": "2022-07-13T12:10:33Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10057-1", "record": "OPENSUSE-SU-2022:10057-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-07-13T12:10:33Z", "date_only": false, "value": "2022-07-13T12:10:33Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10057-1", "record": "OPENSUSE-SU-2022:10057-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-07-13T12:10:33Z", "date_only": false, "value": "2022-07-13T12:10:33Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10057-1", "record": "OPENSUSE-SU-2022:10057-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-07-14T00:00:00Z", "date_only": false, "value": "2022-07-14T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-2294", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2022-07-14T00:00:00Z", "date_only": false, "value": "2022-07-14T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2294", "record": "FKIE_CVE-2022-2294", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2022-07-20T22:00:00Z", "date_only": false, "value": "2022-07-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-07-20T22:00:00Z", "date_only": false, "value": "2022-07-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0782", "record": "WID-SEC-W-2022-0782", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-07-20T22:00:00Z", "date_only": false, "value": "2022-07-20T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-07-20T22:00:00Z", "date_only": false, "value": "2022-07-20T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0782", "record": "WID-SEC-W-2022-0782", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-07-20T22:00:00Z", "date_only": false, "value": "2022-07-20T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-07-20T22:00:00Z", "date_only": false, "value": "2022-07-20T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0782", "record": "WID-SEC-W-2022-0782", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-07-21T00:00:00Z", "date_only": false, "value": "2022-07-21T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-664", "record": "CERTFR-2022-AVI-664", "field": "last_revision_date"}, {"timestamp": "2022-07-21T00:00:00Z", "date_only": false, "value": "2022-07-21T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-665", "record": "CERTFR-2022-AVI-665", "field": "last_revision_date"}, {"timestamp": "2022-07-21T00:00:00Z", "date_only": false, "value": "2022-07-21T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-664", "record": "CERTFR-2022-AVI-664", "field": "initial_release_date"}, {"timestamp": "2022-07-21T00:00:00Z", "date_only": false, "value": "2022-07-21T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-665", "record": "CERTFR-2022-AVI-665", "field": "initial_release_date"}, {"timestamp": "2022-07-21T00:00:00Z", "date_only": false, "value": "2022-07-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-664", "record": "CERTFR-2022-AVI-664", "field": "revisions.0.revision_date"}, {"timestamp": "2022-07-21T00:00:00Z", "date_only": false, "value": "2022-07-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-665", "record": "CERTFR-2022-AVI-665", "field": "revisions.0.revision_date"}, {"timestamp": "2022-07-21T22:00:00Z", "date_only": false, "value": "2022-07-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-07-21T22:00:00Z", "date_only": false, "value": "2022-07-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0782", "record": "WID-SEC-W-2022-0782", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-07-22T14:01:03Z", "date_only": false, "value": "2022-07-22T14:01:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3207", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "ac553529-8cea-41e5-be19-06d25e0d4c43", "content": "\u0420\u044f\u0434\u044b \u0431\u043e\u0440\u0446\u043e\u0432 \u0441 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u043f\u043e\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f. \n\n\u0412\u0441\u043b\u0435\u0434 \u0437\u0430 Microsoft, Google \u0438 Citizen Lab \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0435 \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u043a\u0430\u0442\u0438\u043b\u0438 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Avast, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e Candiru \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 0-day \u0432 Google Chrome \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0437\u0430 \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043b\u0438\u0446\u0430\u043c\u0438 \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u041f\u041e DevilsTongue.\n\n\u041f\u043e\u0441\u043b\u0435 \u043d\u0430\u0435\u0437\u0434\u0430 Citizen Lab \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0441\u043e\u0444\u0442\u0430 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b \u0432\u0441\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 DevilsTongue \u0438 \u0443\u0448\u0435\u043b \u0432 \u0442\u0435\u043d\u044c, \u043a\u0430\u043a \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043e\u0441\u043d\u0430\u0449\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0430.\n\n\u041d\u0430 \u0432\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0432\u0437\u044f\u043b\u0438 CVE-2022-2294, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 WebRTC \u0438 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041f\u0430\u0442\u0447 \u0434\u043b\u044f \u0431\u0430\u0433\u0438, \u043a\u0430\u043a \u043c\u044b \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435, \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d Google 4 \u0438\u044e\u043b\u044f, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438  0-day \u0442\u043e\u0433\u0434\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0438\u0441\u044c. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Avast.\n\nCandiru \u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0430\u0440\u0442\u0435 2022 \u0433\u043e\u0434\u0430, \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044f\u0441\u044c \u043d\u0430 \u0446\u0435\u043b\u0438 \u0432 \u041b\u0438\u0432\u0430\u043d\u0435, \u0422\u0443\u0440\u0446\u0438\u0438, \u0419\u0435\u043c\u0435\u043d\u0435 \u0438 \u041f\u0430\u043b\u0435\u0441\u0442\u0438\u043d\u0435.\n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u0443\u044e \u0442\u0430\u043a\u0442\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0432\u043e\u0434\u043e\u043f\u043e\u0439, \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044f \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0438\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u043d\u043e\u0432\u044b\u0435 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0441 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Chromium \u043e\u0431\u0440\u0430\u0449\u0430\u043b\u0438\u0441\u044c \u0436\u0435\u0440\u0442\u0432\u044b, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u043f\u043e\u0441\u043b\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432.\n\n\u0412 \u043e\u0434\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0434\u043b\u043e\u043c\u0438\u043b\u0438 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0432 \u041b\u0438\u0432\u0430\u043d\u0435 \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b JavaScript, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 XXS \u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0435\u043b\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c. \n\n\u041f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0436\u0435\u0440\u0442\u0432\u044b \u043f\u0440\u043e\u0444\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c, \u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u043b\u0438\u0441\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0431\u0438\u0440\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u044f\u0437\u044b\u043a\u0430, \u0447\u0430\u0441\u043e\u0432\u043e\u0433\u043e \u043f\u043e\u044f\u0441\u0430, \u044d\u043a\u0440\u0430\u043d\u0430, \u0442\u0438\u043f\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u043f\u0430\u043c\u044f\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 cookie \u0438 \u0434\u0440.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u041b\u0438\u0432\u0430\u043d\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f 0-day \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0430\u043a\u0442\u043e\u0440\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0448\u0435\u043b\u043b-\u043a\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Avast \u043d\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u0442\u0435\u043c, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u0440\u0435\u0434\u0435 Windows.\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f DevilsTongue \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b BYOVD, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\nAvast \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438, \u0447\u0442\u043e BYOVD, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 Candiru, \u0442\u0430\u043a\u0436\u0435 \u044f\u0432\u043b\u044f\u043b\u0441\u044f 0-day, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0434\u0430\u0436\u0435 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c.\n\n\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Avast \u043d\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0442\u043e\u0447\u043d\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0446\u0435\u043b\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043f\u043e\u043b\u0430\u0433\u0430\u044f, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u0438\u044f\u043c\u0438, \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c: \u043f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u0443 \u044d\u0442\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0442\u043e\u0447\u043d\u043e \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u0435.", "url": "https://t.me/true_secator/3207"}, {"timestamp": "2022-07-22T16:22:17Z", "date_only": false, "value": "2022-07-22T16:22:17", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.5.date"}, {"timestamp": "2022-07-22T16:22:49Z", "date_only": false, "value": "2022-07-22T16:22:49", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.3.date"}, {"timestamp": "2022-07-22T16:25:07Z", "date_only": false, "value": "2022-07-22T16:25:07", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.7.date"}, {"timestamp": "2022-07-27T17:00:35Z", "date_only": false, "value": "2022-07-27T17:00:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/2110", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "80d487a3-e16e-4969-859c-1ce571374984", "content": "\u0428\u043f\u0438\u043e\u043d DevilsTongue \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e 0-day \u0432 Google Chrome\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e 0-day \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2022-2294, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0430\u0442\u0447\u0435\u0439. \u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u044d\u0442\u043e \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u0431\u0440\u0435\u0448\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u0430\u044f \u0432 Chrome \u0432 2022 \u0433\u043e\u0434\u0443.\n\u25b6\ufe0f \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/2110"}, {"timestamp": "2022-07-28T00:00:00Z", "date_only": false, "value": "2022-07-28T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.0.date"}, {"timestamp": "2022-07-28T00:00:00Z", "date_only": false, "value": "2022-07-28T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-2294", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-07-28T02:15:00Z", "date_only": false, "value": "2022-07-28T02:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9Q96-CWQ7-CR4M", "record": "GHSA-9Q96-CWQ7-CR4M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-07-28T02:15:00Z", "date_only": false, "value": "2022-07-28T02:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-2294", "record": "UBUNTU-CVE-2022-2294", "field": "published"}, {"timestamp": "2022-07-28T02:15:00Z", "date_only": false, "value": "2022-07-28T02:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-2294", "record": "GSD-2022-2294", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-07-28T02:15:07.797Z", "date_only": false, "value": "2022-07-28T02:15:07.797000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.11.date"}, {"timestamp": "2022-07-28T02:15:07.797Z", "date_only": false, "value": "2022-07-28T02:15:07.797", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2294", "record": "FKIE_CVE-2022-2294", "field": "published"}, {"timestamp": "2022-07-28T19:12:00Z", "date_only": false, "value": "2022-07-28T19:12:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.2.date"}, {"timestamp": "2022-07-29T00:00:47Z", "date_only": false, "value": "2022-07-29T00:00:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9Q96-CWQ7-CR4M", "record": "GHSA-9Q96-CWQ7-CR4M", "field": "published"}, {"timestamp": "2022-07-30T13:19:16Z", "date_only": false, "value": "2022-07-30T13:19:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/freelearningtech/1267", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "dd011d75-2438-4a5b-84a6-c3134192c7d5", "content": "*\ud83d\udd30Chrome Zero-day Abused to Spread Spyware to Target Journalists*\ud83d\udd30\n\nThe spyware vendor from Israel, Candiru, was discovered abusing a zero-day vulnerability in Google Chrome to spy on journalists and high-interest individuals from the Middle East, using a spyware called DevilsTongue.\n\n\n*The abuse of zero-day*\n\nAvast researchers spotted the vulnerability and reported it to Google. Further, they disclosed the details after examining DevilsTongue attacks on their clients.\nCandiru started abusing the zero-day in March and targeting users in Palestine, Turkey, Yemen, and Lebanon.\nThe flaw, tracked as CVE-2022-2294, is a high-severity heap-based buffer overflow in WebRTC. Its successful exploitation may lead to code execution on the targeted device.\nAfter being reported to Google, the tech firm patched the exploited zero-day on July 4, which has been under active exploitation in cyberattacks.\n\nSince the bug exists in WebRTC, it also impacts Safari browser but the exploit found only work on Windows.\n\n*Attack vectors*\n\nThe spyware operators have used watering holes and spear-phishing tactics in their attacks.\nThis attack requires no interaction with the victim, such as clicking on a link or downloading a file. \nInstead, a user is made to open an already compromised website or the one created by hackers in a Chromium-based browser or Chrome. \nIn one instance, the attackers infected a website used by a news agency in Lebanon and inserted JavaScript snippets to enable XSS attacks, and redirected targets to the exploit server.\nIn the Lebanon case, the zero-day allowed shellcode execution inside a renderer process and further chained with a sandbox escape flaw that Avast failed to recover for investigation.\n\n*What was the target?*\n\nAfter the initial infection, the DevilsTongue spyware used a BYOVD (bring your own driver) step to elevate the privileges and achieve read and write rights to the infected device's memory. Researchers believe the cybercriminals used the spyware to learn about what news stories the targeted journalist are working on.\n\n*Conclusion*\n\nThe recent report sheds light on the dangers of services offered by commercial spyware vendors. These vendors are developing or buying zero-day exploits to target people asked by their clients. Thus, always protect data with powerful encryption and update devices with the latest security updates.", "url": "https://t.me/freelearningtech/1267"}, {"timestamp": "2022-08-15T16:05:06Z", "date_only": false, "value": "2022-08-15T16:05:06", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.1.date"}, {"timestamp": "2022-08-15T22:01:27Z", "date_only": false, "value": "2022-08-15T22:01:27Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10087-1", "record": "OPENSUSE-SU-2022:10087-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-08-15T22:01:27Z", "date_only": false, "value": "2022-08-15T22:01:27Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10087-1", "record": "OPENSUSE-SU-2022:10087-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-08-15T22:01:27Z", "date_only": false, "value": "2022-08-15T22:01:27Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10087-1", "record": "OPENSUSE-SU-2022:10087-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-08-15T22:01:27Z", "date_only": false, "value": "2022-08-15T22:01:27Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10087-1", "record": "OPENSUSE-SU-2022:10087-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-08-15T22:01:31Z", "date_only": false, "value": "2022-08-15T22:01:31Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10088-1", "record": "OPENSUSE-SU-2022:10088-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-08-15T22:01:31Z", "date_only": false, "value": "2022-08-15T22:01:31Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10088-1", "record": "OPENSUSE-SU-2022:10088-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-08-15T22:01:31Z", "date_only": false, "value": "2022-08-15T22:01:31Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10088-1", "record": "OPENSUSE-SU-2022:10088-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-08-15T22:01:31Z", "date_only": false, "value": "2022-08-15T22:01:31Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10088-1", "record": "OPENSUSE-SU-2022:10088-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-08-22T16:02:18Z", "date_only": false, "value": "2022-08-22T16:02:18", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.6.date"}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-2294", "field": "timestamps.asserted_at", "uuid": "49121ab3-9b10-459e-a8e3-bbddc0e09057", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-2294", "field": "timestamps.asserted_at", "uuid": "e5622667-4260-49c0-b760-7c030178efae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": true, "value": "2022-08-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-2294", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-2294", "field": "evidence.0.details.added_date", "uuid": "e5622667-4260-49c0-b760-7c030178efae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": true, "value": "2022-08-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-2294", "field": "evidence.0.details.date_added", "uuid": "49121ab3-9b10-459e-a8e3-bbddc0e09057", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-2294", "field": "timestamps.first_seen_at", "uuid": "49121ab3-9b10-459e-a8e3-bbddc0e09057", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-2294", "field": "timestamps.first_seen_at", "uuid": "e5622667-4260-49c0-b760-7c030178efae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-2294", "field": "status.status_updated_at", "uuid": "49121ab3-9b10-459e-a8e3-bbddc0e09057", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-2294", "field": "status.status_updated_at", "uuid": "e5622667-4260-49c0-b760-7c030178efae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-2294", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-08-29T15:00:04Z", "date_only": false, "value": "2022-08-29T15:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/2398", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "14ad7f57-20ae-479e-8199-30b3e63fca70", "content": "#CVE\n\nWebRTC Heap Buffer Overflow Vulnerability\nCVE-2022-2294\n\nWebRTC, \u043f\u0440\u043e\u0435\u043a\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u043c \u0441\u0432\u044f\u0437\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c shellcode. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 WebRTC, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Google Chrome, \u043d\u043e \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044f\u0441\u044c \u0438\u043c.", "url": "https://t.me/poxek/2398"}, {"timestamp": "2022-09-01T16:33:44Z", "date_only": false, "value": "2022-09-01T16:33:44", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.8.date"}, {"timestamp": "2022-09-02T00:00:00Z", "date_only": false, "value": "2022-09-02T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_update_date.data.1.date"}, {"timestamp": "2022-09-03T13:47:50Z", "date_only": false, "value": "2022-09-03T13:47:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6726", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "f8680f89-a10d-4c1f-9174-27e46957b267", "content": "#exploit\n1. CVE-2022-23597:\nRCE on Element Desktop via NodeIntegration in SubFrames Bypass\nhttps://blog.electrovolt.io/posts/element-rce\n\n2. CVE-2022-2294:\nHeap buffer overflow in WebRTC\nhttps://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-2294.html", "url": "https://t.me/CyberSecurityTechnologies/6726"}, {"timestamp": "2022-09-15T00:00:00Z", "date_only": true, "value": "2022-09-15", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-2294", "field": "evidence.0.details.due_date", "uuid": "49121ab3-9b10-459e-a8e3-bbddc0e09057", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-20T22:00:00Z", "date_only": false, "value": "2022-09-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2022-10-06T22:00:00Z", "date_only": false, "value": "2022-10-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2022-10-30T10:05:47Z", "date_only": false, "value": "2022-10-30T10:05:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/1646", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "fe1501c2-f19c-4c3c-b9e2-abba36038aad", "content": "\u200b\u26a1\ufe0f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chrome.\n\n\ud83d\udcac Chrome \u0432\u0435\u0440\u0441\u0438\u0438 107 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0442 Google \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2022-3723, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435. \u0411\u0440\u0435\u0448\u044c \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0435\u0439 \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript Chromium V8. \u0410 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043f\u0440\u043e \u043d\u0435\u0435 25 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Avast.\n\nGoogle \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0435\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043f\u0440\u043e \u0442\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435. \u041d\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e CVE-2022-3723, \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0430\u0441\u043a\u0440\u043e\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431\u043d\u043e\u0432\u0438\u0442 Chrome.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u0443\u0436\u0435 \u0441\u0435\u0434\u044c\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f Google \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443, \u043d\u0438\u0436\u0435 \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d \u043f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a:\n\nCVE-2022-3075 \u2013 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 IPC-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Mojo;\n\nCVE-2022-2856 \u2013 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 Intents;\n\nCVE-2022-2294 \u2013 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebRTC (Web Real-Time Communications);\n\nCVE-2022-1364 \u2013 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript Chrome V8;\n\nCVE-2022-1096 \u2013 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript Chrome V8;\n\nCVE-2022-0609 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0438;\n\nIT-\u0433\u0438\u0433\u0430\u043d\u0442 \u043d\u0435 \u0441\u0442\u0430\u043b \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a \u0438 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u0445 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435.\n\n#Google #Chrome #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/1646"}, {"timestamp": "2022-11-29T00:00:00Z", "date_only": false, "value": "2022-11-29T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-12-30T14:13:30Z", "date_only": false, "value": "2022-12-30T14:13:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/2401", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "ceca531e-6ce7-4236-bf79-16df4cff12a4", "content": "Spyware sold by Israeli company Candiru has been caught exploiting a recently discovered zero-day vulnerability in Google Chrome (CVE-2022-2294) to attack journalists.\n\nRead details: https://thehackernews.com/2022/07/candiru-spyware-caught-exploiting.html", "url": "https://t.me/thehackernews/2401"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "5c3c3e89-9ba9-4b8c-b883-1d7e1d7adad8"}, {"timestamp": "2023-06-21T22:00:00Z", "date_only": false, "value": "2023-06-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-06-21T22:00:00Z", "date_only": false, "value": "2023-06-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0782", "record": "WID-SEC-W-2022-0782", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-07-21T09:03:37Z", "date_only": false, "value": "2023-07-21T09:03:37.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/poxek/2077", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "8be7ffdd-76bd-4bc6-9ea9-8ecac807f826", "content": "Update Google Chrome Browser to Patch New Zero-Day Exploit Detected in the Wild\nThe shortcoming, tracked as CVE-2022-2294, relates to a heap overflow flaw in the WebRTC component that provides real-time audio and video communication capabilities in browsers without the need to install plugins or download native apps.\n\u25b6\ufe0f \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/2077"}, {"timestamp": "2023-09-06T13:44:15Z", "date_only": false, "value": "2023-09-06T13:44:15.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/bd1c3290-9486-4bf9-ae59-fe17c0948133", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "20dee24e-c28e-4e57-a0a3-32e8ad310125"}, {"timestamp": "2023-09-21T09:26:48Z", "date_only": false, "value": "2023-09-21T09:26:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/avleonovrus/35", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "780f35ac-7b25-4d6c-9fe9-8a8285ef59b0", "content": "\u041c\u0430\u0439\u043a\u0440\u043e\u0441\u043e\u0444\u0442 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0442\u0432\u043e\u0440\u044f\u0442 \u0434\u0438\u0447\u044c, \u043d\u043e \u044d\u0442\u043e \u043d\u0435 \u043f\u043e\u0432\u043e\u0434 \u043d\u0435 \u043f\u0430\u0442\u0447\u0438\u0442\u044c \u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b. \u0412\u043e \u0432\u0441\u044f\u043a\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043a\u0430. \u041d\u0443 \u0438 \u0442\u043e\u0447\u043d\u043e \u043d\u0435 \u043f\u043e\u0432\u043e\u0434 \u043d\u0435 \u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \ud83d\ude42 \u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0432\u0438\u0434\u044f\u0448\u043a\u0430 \u043f\u0440\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 Patch Tuesday \u0431\u0443\u0434\u0435\u0442, \u043d\u043e \u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e \u043f\u043e\u0440\u0430\u043d\u044c\u0448\u0435, \u0432\u044b\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e \u0440\u0435\u043f\u043e\u0440\u0442 Vulristics. \u0422\u0435\u043f\u0435\u0440\u044c \u0432\u0441\u0451 \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0435\u0441\u0443 \u0432 \u0442\u0435\u043b\u0435\u0436\u0435\u043d\u044c\u043a\u0443 avleonovrus. \ud83d\ude09\n\n\u0427\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e. \u0421\u0432\u0435\u0440\u0445\u0443 \u0441\u043f\u0438\u0441\u043a\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0432\u0436\u0438\u0432\u0443\u044e Elevation of Privilege \u0432 Windows CSRSS (CVE-2022-22047), \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u0435\u0439\u043d\u0441\u0442\u0440\u0438\u043c\u043d\u044b\u0435 \u043c\u0435\u0434\u0438\u0430 \u043f\u0440\u043e\u0442\u0440\u0443\u0431\u0438\u043b\u0438. \u041c\u043e\u0436\u043d\u043e \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 SYSTEM. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0432\u0438\u0434\u043d\u043e. \n\n\u0414\u0430\u043b\u044c\u0448\u0435 \u043c\u0435\u043d\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. Remote Code Execution \u0432 Remote Procedure Call Runtime (CVE-2022-22038). \u0422\u0443\u0442 \u0443 Microsoft \u0435\u0441\u0442\u044c POC \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. \u041d\u043e \u0432\u0440\u044f\u0434 \u043b\u0438 \u0434\u043e\u0432\u0435\u0434\u0443\u0442 \u0434\u043e \u0447\u0435\u0433\u043e-\u0442\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e, \u0442.\u043a. Exploitation Less Likely. \n\n\u041c\u0435\u0436\u0434\u0443 \u0438\u044e\u043d\u044c\u0441\u043a\u0438\u043c \u0438 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u043c Patch Tuesday \u0432\u044b\u0448\u043b\u0430 Memory Corruption \u0432 Microsoft Edge (CVE-2022-2294), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u0438\u0434\u0438\u043c\u043e \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 RCE \u0438 Google \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \u043e\u043d\u0430 \u0432\u0436\u0438\u0432\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f.   \n\n\u0415\u0449\u0451 \u0437\u0430\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0432 \u044d\u0442\u043e\u043c Patch Tuesday \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u0442\u043e EoP. \u0422\u0430\u043a\u0436\u0435 \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Azure Site Recovery. \u0418 EoP, \u0438 RCE, \u0438 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043c\u043d\u043e\u0433\u043e \u0441 \u043d\u0435\u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430\u043c\u0438 \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0440\u0435\u043b\u043e\u0441\u0442\u0438 POC. \u041f\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e  Azure Site Recovery \u044d\u0442\u043e \"Site Recovery is a native disaster recovery as a service (DRaaS)\", \u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0434\u043e\u043b\u0436\u043d\u043e \u043f\u0430\u0442\u0447\u0438\u0442\u044c\u0441\u044f \u0441\u0430\u043c\u0438\u043c\u0438 Microsoft, \u043d\u043e \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0442\u0430\u043c \u0435\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0445\u043e\u0441\u0442\u0430\u0445 Microsoft Azure Site Recovery suite \u0438 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0447\u0430\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u0442\u043e \u0432 \u043d\u0435\u043c. Tenable \u043f\u0440\u043e CVE-2022-33675 \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e SYSTEM.\n\n@avleonovrus #Microsoft #PatchTuesday #Vulristics", "url": "https://t.me/avleonovrus/35"}, {"timestamp": "2023-09-29T00:00:00Z", "date_only": false, "value": "2023-09-29T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.10.date"}, {"timestamp": "2023-09-29T09:00:00Z", "date_only": false, "value": "2023-09-29T09:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_update_date.data.2.date"}, {"timestamp": "2023-10-21T12:56:55Z", "date_only": false, "value": "2023-10-21T12:56:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/avleonovrus/36", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "fc60ee3a-ebf2-4280-9121-98e842ca656f", "content": "\u0412\u0438\u0434\u044f\u0448\u0435\u0447\u043a\u0430 \u043f\u0440\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 Microsoft Patch Tuesday \u0438 \u043f\u0440\u043e \u0442\u043e, \u0447\u0442\u043e Microsoft \u0442\u0432\u043e\u0440\u0438\u0442 \u0434\u0438\u0447\u044c. \u0412 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0435 \u0432\u0441\u0435 \u0442\u043e \u0436\u0435, \u043e \u0447\u0435\u043c \u0442\u0443\u0442 \u043f\u0438\u0441\u0430\u043b. \u041d\u0443 \u0438 \u043f\u0440\u043e \u0440\u0435\u043f\u043e\u0440\u0442 \u043c\u0430\u0439\u043a\u0440\u043e\u0441\u043e\u0444\u0442\u043e\u0432\u0441\u043a\u0438\u0439 \u0442\u043e\u0436\u0435 \u043d\u0430\u043a\u0438\u043d\u0443\u043b \u043d\u0435\u043c\u043d\u043e\u0436\u043a\u043e \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0430\u0432\u043a\u0438. \ud83d\ude42\n\n\u2014-\n\nHello everyone! Microsoft has been acting weird lately. I mean the recent publication of a propaganda report about evil Russians and how Microsoft is involved in the conflict between countries. It wouldn't be unusual for a US government agency, NSA or CIA to publish such a report. But when a global IT vendor, which, in theory, should be more or less neutral, does this\u2026 This is a clear signal. It's not about business anymore. \n\nI'll take a closer look at this report in the next episode of the Vulnerability Management news, but for now let's take a look at Microsoft July Patch Tuesday. Yes, the vendor is behaving strangely, but Microsoft products need to be patched. Right? At least for now. And tracking vulnerabilities is always a good thing. \ud83d\ude42\n\n01:32 CSRSS Elevation of Privilege (CVE-2022-22047)\n04:36 RPC Remote Code Execution (CVE-2022-22038)\n05:44 Microsoft Edge Memory Corruption (CVE-2022-2294)\n06:55 32 vulnerabilities in Azure Site Recovery\n\nVideo: https://youtu.be/HjfxxcqWrH4\nVideo2 (for Russia): https://vk.com/video-149273431_456239096\nBlogpost: https://avleonov.com/2022/07/23/microsoft-patch-tuesday-july-2022-propaganda-report-csrss-eop-rpc-rce-edge-azure-site-recovery/\nFull report: https://avleonov.com/vulristics_reports/ms_patch_tuesday_july2022_report_with_comments_ext_img.html\n\n@avleonovrus #microsoft #patchtuesday", "url": "https://t.me/avleonovrus/36"}, {"timestamp": "2023-11-25T11:06:49.314Z", "date_only": false, "value": "2023-11-25T11:06:49.314Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Chrome", "record": "cve-2022-2294", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-11-25T11:15:00Z", "date_only": false, "value": "2023-11-25T11:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-2294", "record": "GSD-2022-2294", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-25T17:01:13Z", "date_only": false, "value": "2023-11-25T17:01:13", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_release_date.data.4.date"}, {"timestamp": "2023-12-13T01:19:19.906Z", "date_only": false, "value": "2023-12-13T01:19:19.906570Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-2294", "record": "GSD-2022-2294", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-16T20:58:09Z", "date_only": false, "value": "2024-01-16T20:58:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2882", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "134a9cc2-2a49-46db-aab6-6bad9a19f1cf", "content": "#ExploitObserverAlert\n\nCVE-2022-2294\n\nDESCRIPTION: Exploit Observer has 27 entries in 3 file formats related to CVE-2022-2294. Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n\nFIRST-EPSS: 0.006130000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/2882"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12180-1", "record": "OPENSUSE-SU-2024:12180-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12395-1", "record": "OPENSUSE-SU-2024:12395-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12180-1", "record": "OPENSUSE-SU-2024:12180-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12395-1", "record": "OPENSUSE-SU-2024:12395-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12180-1", "record": "OPENSUSE-SU-2024:12180-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12395-1", "record": "OPENSUSE-SU-2024:12395-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12180-1", "record": "OPENSUSE-SU-2024:12180-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12395-1", "record": "OPENSUSE-SU-2024:12395-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-03T00:32:09.581Z", "date_only": false, "value": "2024-08-03T00:32:09.581Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-2294", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:32:55.060Z", "date_only": false, "value": "2024-12-24T20:32:55.060724Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971693", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "a67fb1ec-624b-4f43-b7b5-f8873335d4ce", "url": "https://feedsin.space/feed/CISAKevBot/items/2971693"}, {"timestamp": "2025-02-06T02:39:17Z", "date_only": false, "value": "2025-02-06T02:39:17.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/l5uto4RTTVtNTCXQW2FGYRiamjp1g6VC6GGax2xyWPBA5lja", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "5c100ed9-338d-4935-95bd-0d58dd4c5af0"}, {"timestamp": "2025-02-23T02:10:34Z", "date_only": false, "value": "2025-02-23T02:10:34.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "d219c586-4eee-4622-95b7-b7b42a8b9556"}, {"timestamp": "2025-10-20T22:00:00Z", "date_only": false, "value": "2025-10-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2025-10-20T22:00:00Z", "date_only": false, "value": "2025-10-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0782", "record": "WID-SEC-W-2022-0782", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-10-20T22:00:00Z", "date_only": false, "value": "2025-10-20T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-20T22:00:00Z", "date_only": false, "value": "2025-10-20T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0782", "record": "WID-SEC-W-2022-0782", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-21T08:23:25.439Z", "date_only": false, "value": "2025-10-21T08:23:25.439+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0782", "record": "WID-SEC-W-2022-0782", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-21T08:28:29.099Z", "date_only": false, "value": "2025-10-21T08:28:29.099+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0778", "record": "WID-SEC-W-2022-0778", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-22T00:32:34Z", "date_only": false, "value": "2025-10-22T00:32:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9Q96-CWQ7-CR4M", "record": "GHSA-9Q96-CWQ7-CR4M", "field": "modified"}, {"timestamp": "2025-10-24T14:09:38.790Z", "date_only": false, "value": "2025-10-24T14:09:38.790000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "sources_update_date.data.3.date"}, {"timestamp": "2026-02-02T12:27:15.257Z", "date_only": false, "value": "2026-02-02T12:27:15.257191Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b4a75922-8ba0-42bf-b698-374611cf6e66", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "e46ae1f0-cf12-468a-b26d-f1b7e867694f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b4a75922-8ba0-42bf-b698-374611cf6e66"}, {"timestamp": "2026-02-02T12:27:15.257Z", "date_only": false, "value": "2026-02-02T12:27:15.257191Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b4a75922-8ba0-42bf-b698-374611cf6e66", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "3d244cc9-30f9-4ca8-9885-d0d6638bb0a0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b4a75922-8ba0-42bf-b698-374611cf6e66"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-2294", "field": "timestamps.recorded_at", "uuid": "49121ab3-9b10-459e-a8e3-bbddc0e09057", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-09T19:59:25.491Z", "date_only": false, "value": "2026-03-09T19:59:25.491000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202205-1370", "record": "VAR-202205-1370", "field": "last_update_date"}, {"timestamp": "2026-04-22T07:41:14Z", "date_only": false, "value": "2026-04-22T07:41:14Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-2294", "record": "UBUNTU-CVE-2022-2294", "field": "modified"}, {"timestamp": "2026-06-19T12:47:05.640Z", "date_only": false, "value": "2026-06-19T12:47:05.640894Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a1cf61ae-7d33-4087-aa9e-47848ef2fa25", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "0f0ec7af-d4e4-4866-a38e-ea16d4787f56", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a1cf61ae-7d33-4087-aa9e-47848ef2fa25"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-2294", "field": "timestamps.recorded_at", "uuid": "e5622667-4260-49c0-b760-7c030178efae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:59.732Z", "date_only": false, "value": "2026-06-23T11:13:59.732660Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e5622667-4260-49c0-b760-7c030178efae", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "ca3018ee-c0b7-4442-920c-a088fe44f9a8", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e5622667-4260-49c0-b760-7c030178efae"}, {"timestamp": "2026-06-23T14:05:31.891Z", "date_only": false, "value": "2026-06-23T14:05:31.891626Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0ce36621-e362-4f0e-9e32-5b5fd2f6b3c7", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "68c19a5d-7640-4883-ab87-5b9af9ca4d26", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0ce36621-e362-4f0e-9e32-5b5fd2f6b3c7"}, {"timestamp": "2026-07-12T22:00:16.239Z", "date_only": false, "value": "2026-07-12T22:00:16.239832Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/10100", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "5d36150d-98b9-483c-8c9e-475868173137", "url": "https://t.me/pleyades_it/10100"}, {"timestamp": "2026-07-13T00:00:40.079Z", "date_only": false, "value": "2026-07-13T00:00:40.079020Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/10100", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "b0bcd444-d7dd-4fd1-a7bd-4e0bdeb557f0", "url": "https://t.me/pleyades_it/10100"}, {"timestamp": "2026-07-14T00:00:52.423Z", "date_only": false, "value": "2026-07-14T00:00:52.423381Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/10100", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "7e7cb318-a83d-4816-a389-63663260581d", "url": "https://t.me/pleyades_it/10100"}, {"timestamp": "2026-07-26T02:02:50.441Z", "date_only": false, "value": "2026-07-26T02:02:50.441284Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/470", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "4a18422b-4842-474a-bda3-e35e5520e57a", "url": "https://t.me/EchelonEyes/470"}, {"timestamp": "2026-07-26T02:02:51.904Z", "date_only": false, "value": "2026-07-26T02:02:51.904495Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/419", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "9053ea0c-9617-4bfd-95a4-706a8fc9f106", "url": "https://t.me/EchelonEyes/419"}, {"timestamp": "2026-07-26T07:01:08.652Z", "date_only": false, "value": "2026-07-26T07:01:08.652897Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/615", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "9662db96-1a5b-479c-8cef-d75386db5e61", "url": "https://t.me/EchelonEyes/615"}, {"timestamp": "2026-07-27T00:01:17.681Z", "date_only": false, "value": "2026-07-27T00:01:17.681716Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/615", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "1616babc-9c43-441f-87d9-1b19f78dde8a", "url": "https://t.me/EchelonEyes/615"}, {"timestamp": "2026-07-27T00:01:20.814Z", "date_only": false, "value": "2026-07-27T00:01:20.814727Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/470", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "6aeb5826-09ae-404f-afd5-c03b1b117c51", "url": "https://t.me/EchelonEyes/470"}, {"timestamp": "2026-07-27T00:01:21.607Z", "date_only": false, "value": "2026-07-27T00:01:21.607339Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/419", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "3db1e6cb-d231-4324-b68e-0b2d6ece0e4d", "url": "https://t.me/EchelonEyes/419"}, {"timestamp": "2026-07-28T09:00:07.373Z", "date_only": false, "value": "2026-07-28T09:00:07.373399Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/615", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "1d4decd5-522d-4fbc-a3c3-13769d5e9f0c", "url": "https://t.me/EchelonEyes/615"}, {"timestamp": "2026-07-28T12:00:05.446Z", "date_only": false, "value": "2026-07-28T12:00:05.446008Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/470", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "603c0ef2-c732-432f-b938-02fe2a4fa776", "url": "https://t.me/EchelonEyes/470"}, {"timestamp": "2026-07-28T13:00:04.957Z", "date_only": false, "value": "2026-07-28T13:00:04.957061Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/419", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "85041136-1bc5-426f-bb38-2ca9d1be3758", "url": "https://t.me/EchelonEyes/419"}, {"timestamp": "2026-07-29T00:00:37.048Z", "date_only": false, "value": "2026-07-29T00:00:37.048070Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/419", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "659d8580-1718-40d5-9007-3e67e21e08f2", "url": "https://t.me/EchelonEyes/419"}, {"timestamp": "2026-07-29T00:00:37.948Z", "date_only": false, "value": "2026-07-29T00:00:37.948481Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/470", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "7852e5df-8a51-4dec-ac5a-2dcb0de8b45f", "url": "https://t.me/EchelonEyes/470"}, {"timestamp": "2026-07-29T00:00:41.550Z", "date_only": false, "value": "2026-07-29T00:00:41.550004Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/615", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "d7d0ed4e-9165-4fb5-9f1f-45dab96536f9", "url": "https://t.me/EchelonEyes/615"}, {"timestamp": "2026-08-04T03:55:43.075Z", "date_only": false, "value": "2026-08-04T03:55:43.075Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-2294", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-04T03:55:43.075Z", "date_only": false, "value": "2026-08-04T03:55:43.075Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-2294", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-04T05:16:28.260Z", "date_only": false, "value": "2026-08-04T05:16:28.260", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2294", "record": "FKIE_CVE-2022-2294", "field": "lastModified"}, {"timestamp": "2026-08-04T08:01:36.962Z", "date_only": false, "value": "2026-08-04T08:01:36.962119Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msakc7byjl2n", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "48a2f82a-7e5c-4835-8885-3e8da1def1a3", "url": "https://bsky.app/profile/vulnsea.com/post/3msakc7byjl2n"}, {"timestamp": "2026-09-01T17:00:11.015Z", "date_only": false, "value": "2026-09-01T17:00:11.015378Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/596", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "773125d6-1036-493b-8357-7a4b9ade9149", "url": "https://t.me/Hackme_news/596"}, {"timestamp": "2026-09-01T17:00:26.562Z", "date_only": false, "value": "2026-09-01T17:00:26.562297Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6020", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "5ad97778-e2ea-47d5-8fc1-9dd8d7f8623c", "url": "https://t.me/cissp/6020"}, {"timestamp": "2026-09-01T17:00:28.189Z", "date_only": false, "value": "2026-09-01T17:00:28.189250Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/5977", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "25a471d4-89c7-454d-a198-9c1a41515a1d", "url": "https://t.me/cissp/5977"}, {"timestamp": "2026-09-01T20:01:15.781Z", "date_only": false, "value": "2026-09-01T20:01:15.781062Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/77727", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "72dad84c-c692-46c3-9c7c-c78f76ca678c", "url": "https://t.me/hacking_Attack/77727"}, {"timestamp": "2026-09-05T04:00:04.003Z", "date_only": false, "value": "2026-09-05T04:00:04.003863Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/77727", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "75b5b815-b7ce-4b98-a085-eb3c756e1a5a", "url": "https://t.me/hacking_Attack/77727"}, {"timestamp": "2026-09-09T01:00:04.548Z", "date_only": false, "value": "2026-09-09T01:00:04.548757Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Hackme_news/596", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "ac63aa67-b5ee-4e42-bf2d-49f6e80ccb83", "url": "https://t.me/Hackme_news/596"}, {"timestamp": "2026-09-10T07:00:04.037Z", "date_only": false, "value": "2026-09-10T07:00:04.037132Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/6020", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "a87f9474-a44c-40c3-b05d-5a6616094294", "url": "https://t.me/cissp/6020"}, {"timestamp": "2026-09-10T08:00:05.963Z", "date_only": false, "value": "2026-09-10T08:00:05.963476Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/5977", "record": "CVE-2022-2294", "field": "creation_timestamp", "uuid": "202c259f-b6a0-4408-a7de-06d436eb2f5a", "url": "https://t.me/cissp/5977"}, {"timestamp": "2026-09-20T19:41:51Z", "date_only": false, "value": "2026-09-20T19:41:51Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10055-1", "record": "OPENSUSE-SU-2022:10055-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:41:51Z", "date_only": false, "value": "2026-09-20T19:41:51Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10055-1", "record": "OPENSUSE-SU-2022:10055-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:41:52Z", "date_only": false, "value": "2026-09-20T19:41:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10057-1", "record": "OPENSUSE-SU-2022:10057-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:41:52Z", "date_only": false, "value": "2026-09-20T19:41:52Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10057-1", "record": "OPENSUSE-SU-2022:10057-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:42:04Z", "date_only": false, "value": "2026-09-20T19:42:04Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10087-1", "record": "OPENSUSE-SU-2022:10087-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:42:04Z", "date_only": false, "value": "2026-09-20T19:42:04Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10087-1", "record": "OPENSUSE-SU-2022:10087-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:42:05Z", "date_only": false, "value": "2026-09-20T19:42:05Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10088-1", "record": "OPENSUSE-SU-2022:10088-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:42:05Z", "date_only": false, "value": "2026-09-20T19:42:05Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10088-1", "record": "OPENSUSE-SU-2022:10088-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:33:21Z", "date_only": false, "value": "2026-09-20T20:33:21Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12180-1", "record": "OPENSUSE-SU-2024:12180-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:33:21Z", "date_only": false, "value": "2026-09-20T20:33:21Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12180-1", "record": "OPENSUSE-SU-2024:12180-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:37:45Z", "date_only": false, "value": "2026-09-20T20:37:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12395-1", "record": "OPENSUSE-SU-2024:12395-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:37:45Z", "date_only": false, "value": "2026-09-20T20:37:45Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12395-1", "record": "OPENSUSE-SU-2024:12395-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:50:05Z", "date_only": false, "value": "2026-09-20T20:50:05Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:50:05Z", "date_only": false, "value": "2026-09-20T20:50:05Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-01T07:53:31.843Z", "date_only": false, "value": "2026-10-01T07:53:31.843469Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2024-LO80114", "record": "CLEANSTART-2024-LO80114", "field": "published"}, {"timestamp": "2026-10-08T14:25:07Z", "date_only": false, "value": "2026-10-08T14:25:07Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2024-LO80114", "record": "CLEANSTART-2024-LO80114", "field": "modified"}]}