CVE-2022-22779: Retained exploded messages in Keybase clients for macOS and Windows
The Keybase Clients for macOS and Windows before version 5.9.0 fails to properly remove exploded messages initiated by a user. This can occur if the receiving user switches to a non-chat feature and places the host in a sleep state before the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from a user’s filesystem.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-22779?
CVE-2022-22779 is a vulnerability that affects Keybase Clients for macOS and Windows before version 5.9.0.
How does CVE-2022-22779 impact Keybase Clients?
CVE-2022-22779 allows exploded messages initiated by a user to persist if the receiving user switches to a non-chat feature and puts the host in a sleep state before the messages are exploded.
What is the severity of CVE-2022-22779?
The severity of CVE-2022-22779 is medium with a severity value of 3.7.
Which software versions are affected by CVE-2022-22779?
Keybase Clients for macOS and Windows versions before 5.9.0 are affected by CVE-2022-22779.
How can I fix CVE-2022-22779?
To fix CVE-2022-22779, users should update Keybase Clients to version 5.9.0 or later.