CVE-2022-22779

Retained exploded messages in Keybase clients for macOS and Windows

Low · published February 9, 2022

CVSS v3.1
3.7
EPSS
1%
Percentile
56.2
In the wild
Unconfirmed
What it is

The Keybase Clients for macOS and Windows before version 5.9.0 fails to properly remove exploded messages initiated by a user. This can occur if the receiving user switches to a non-chat feature and places the host in a sleep state before the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from a user’s filesystem.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00801 · 56.2th percentile
Published
2022-02-09T22:05Z
EPSS history
Timeline
  • 09 FEB 22:05Z
    Retained exploded messages in Keybase clients for macOS and Windows
    cvelistv5