CVE-2022-41322

In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution

High · published September 23, 2022

CVSS v3.1
7.8
EPSS
1%
Percentile
44.5
In the wild
Unconfirmed
What it is

In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00538 · 44.5th percentile
Published
2022-09-23T04:55Z
EPSS history
Timeline
  • 23 SEP 04:55Z
    In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution
    cvelistv5