CVE-2022-22779
Low
Description
The Keybase Clients for macOS and Windows before version 5.9.0 fails to properly remove exploded messages initiated by a user. This can occur if the receiving user switches to a non-chat feature and places the host in a sleep state before the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from a user’s filesystem.
SeverityLow
CVSS3.7
Exploit probability—
Product
Keybase
PublishedFeb 9, 2022
First seenFeb 9, 2022
How to fix
Update
- keybase keybase5.9.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| keybase keybase | v < 5.9.0 | 5.9.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.