[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9YdwLOugVxMeuXrMeMTnNhwMa4HdjhW4FbCUyTRcIRU":3,"g5a-risk:CVE-2022-29777":128},{"success":4,"data":5,"meta":126},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":51,"references":52,"referencesCount":67,"weaknesses":68,"weaknessesCount":77,"isActivelyExploited":78,"cisaInfo":27,"otxData":27,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":117,"notableEvents":118},"CVE-2022-29777","What is CVE-2022-29777?","Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component DesktopEditor\u002Ffontengine\u002Ffontconverter\u002FFontFileBase.h.","Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component DesktopEditor\u002Ffontengine...","2022-06-02T14:15:51.12","2022-12-09T19:32:33.73",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.06912,[39,39,39,39,39,39,39],"Critical",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"onlyoffice","core","*","cpe:2.3:a:onlyoffice:core:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":46,"criteria":50,"vulnerable":4},"document_server","cpe:2.3:a:onlyoffice:document_server:*:*:*:*:*:*:*:*",2,[53,59,63],{"url":54,"source":55,"tags":56},"https:\u002F\u002Fgithub.com\u002FONLYOFFICE\u002FDocumentServer\u002Fblob\u002Fmaster\u002FCHANGELOG.md#601","GitHub",[57,58],"Release Notes","Third Party Advisory",{"url":60,"source":55,"tags":61},"https:\u002F\u002Fgithub.com\u002FONLYOFFICE\u002Fcore\u002Fcommit\u002Fb17d5e860f30e8be2caeb0022b63be4c76660178",[62,58],"Patch",{"url":64,"source":55,"tags":65},"https:\u002F\u002Fgithub.com\u002Fmoehw\u002Fpoc_exploits\u002Ftree\u002Fmaster\u002FCVE-2022-29777",[66,58],"Exploit",3,[69],{"id":70,"name":71,"description":72,"extendedDescription":73,"status":74,"abstraction":75,"structure":76},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2022-29777? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-29777, a critical severity cyber security vulnerability from 2022. Onlyoffice Document Server v6.0.0 and below and Core 6....","CVE-2022-29777, CVE-2022-29777 vulnerability, CVE-2022-29777 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, onlyoffice security, core vulnerability, document_server vulnerability","\u002Fwhat-is\u002Fcve-2022-29777",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-29777","Cybersecurity","CVE-2022-29777, CVE-2022-29777 vulnerability, CVE-2022-29777 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":27,"Negate":27,"Nodes":107},[108],{"Operator":109,"Negate":27,"CPEMatch":110},"OR",[111,114],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":112,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":113},"4D7538B8-3720-42EB-BE17-C272DFCEA122","6.1.0.26",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":115,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":116},"5398FF95-A6B1-4BE0-8A46-1FD03FDDE7D2","6.0.0",[],[119],{"id":120,"eventType":121,"eventTime":122,"details":123,"label":124,"color":125},"20c615e3-265c-4ce5-ad0e-e163921c7fd6","LOW_EPSS_DELTA","2026-06-16T04:05:24.683966+00:00","Daily EPSS score decreased by 0.122 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":127,"version":33},1792326735861,{"score":129,"band":130,"action":131,"scoredAt":132},55,"Medium","Plan remediation","2026-10-16T06:54:40.994542+00:00"]