How severe is CVE-2022-22779?

This vulnerability has a severity rating of LOW with a CVSS score of 3.7 out of 10.

What type of vulnerability is CVE-2022-22779?

This is classified as CWE-212, which is a common weakness in software security.

CVE-2022-22779 - LOW Severity | CVSS 3.7

Vulnerability Description

The Keybase Clients for macOS and Windows before version 5.9.0 fails to properly remove exploded messages initiated by a user. This can occur if the receiving user switches to a non-chat feature and places the host in a sleep state before the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from a user’s filesystem.

Related Vulnerabilities

CVE-2025-48708

MEDIUM

CVSS:4.0(Medium)

gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.

CWE-2122025

CVE-2020-9780

LOW

CVSS:3.3(Low)

The issue was resolved by clearing application previews when content is deleted. This issue is fixed in iOS 13.4 and iPadOS 13.4. A local user may be able to view deleted content in the app switcher.

CWE-2122020

CVE-2019-19362

MEDIUM

CVSS:4.3(Medium)

An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. (The vendor states that it was later fixed.) Upon login, every communication is saved with...

CWE-2122019

CVE-2022-4734

MEDIUM

CVSS:4.3(Medium)

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository usememos/memos prior to 0.9.1.

CWE-2122022

CVE-2023-28834

MEDIUM

CVSS:4.3(Medium)

Nextcloud Server is an open source personal cloud server. Nextcloud Server 24.0.0 until 24.0.6 and 25.0.0 until 25.0.4, as well as Nextcloud Enterprise Server 23.0.0 until 23.0.11, 24.0.0 until 24.0.6...

CWE-2122023

CVE-2025-20118

MEDIUM

CVSS:4.4(Medium)

A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this...

CWE-2122025