CVE-2022-41322
High
Description
In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Kitty
PublishedSep 23, 2022
First seenSep 23, 2022
Weakness typeCWE-116CWE-116
How to fix
Update
- kitty_project kitty0.26.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kitty_project kitty | v < 0.26.2 | 0.26.2 |
| fedoraproject fedora | 36, 37 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.