CVE-2022-27536

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-295

Affected software

No affected versions have been published.

Timeline

Published
Apr 20, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-275377.8Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escCVE-2022-275387.0A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow aCVE-2022-275397.8Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allCVE-2022-27549.8The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not validate and escape some reservation parameters before using theCVE-2022-275407.8A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might aCVE-2022-275417.8Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allCVE-2022-275446.5BigFix Web Reports authorized users may see SMTP credentials in clear text.CVE-2022-275455.4BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page.CVE-2022-275466.1HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input supplCVE-2022-275477.4HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into suppCVE-2022-275485.5HCL Launch stores user credentials in plain clear text which can be read by a local user.CVE-2022-275495.5HCL Launch may store certain data for recurring activities in a plain text format.