PT-2022-23262 · Unknown · Safe Exam Browser

Published 2022-08-19 · Updated 2022-08-22 · CVE-2022-36220

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Safe Exam Browser versions prior to 3.4.0

Description The issue allows an attacker to achieve code execution via the browser's print dialog due to a kiosk breakout vulnerability without requiring a quit password.

Recommendations For versions prior to 3.4.0, update to version 3.4.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2022-36220

Affected Products

Safe Exam Browser

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-36220 · Security Note
• https://safeexambrowser.org/windows/win_release_notes_en.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-36220 · Vendor Advisory
• https://github.com/SafeExamBrowser/seb-win-refactoring/issues/434 · Note
• https://t.me/cibsecurity/48433 · Telegram Post