CVE-2022-22779

Retained exploded messages in Keybase clients for macOS and Windows

State: Published
Severity: 3.7 Low
Published: Feb 9, 2022
Updated: Sep 17, 2024
Reserved: Jan 7, 2022

Description

The Keybase Clients for macOS and Windows before version 5.9.0 fails to properly remove exploded messages initiated by a user. This can occur if the receiving user switches to a non-chat feature and places the host in a sleep state before the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from a user’s filesystem.

Scores

CVSS	Score	Vector	Source
3.1	3.7 Low	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N	Zoom

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Keybase Client for macOSZoom Video Communications Inc	before 5.9.0Affected
Keybase Client for WindowsZoom Video Communications Inc	before 5.9.0Affected

References

https://explore.zoom.us/en/trust/security/security-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.