[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fY6t3QI_Zl2-4uQGsccDgzu76m-De3WmtI-9G6ZG8uhg":3,"g5a-risk:CVE-2022-37290":143},{"success":4,"data":5,"meta":140},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":50,"references":51,"referencesCount":84,"weaknesses":85,"weaknessesCount":94,"isActivelyExploited":95,"cisaInfo":26,"otxData":26,"relatedBlogPosts":96,"seoMetadata":97,"configurations":122,"relatedVendorCves":138,"notableEvents":139},"CVE-2022-37290","What is CVE-2022-37290?","GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.","2022-11-14T08:15:09.387","2025-05-01T14:15:26.527",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[15,29],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":24,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":24,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00329,[33,33,33,33,33,33,33],"Medium",[37,42,47],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"gnome","nautilus","42.2","cpe:2.3:a:gnome:nautilus:42.2:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"fedoraproject","fedora","36","cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":48,"criteria":49,"vulnerable":4},"37","cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",3,[52,60,63,67,71,74,76,78,80,82],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fgitlab.gnome.org\u002FGNOME\u002Fnautilus\u002F-\u002Fissues\u002F2376","Gnome",[56,57,58,59],"Exploit","Issue Tracking","Patch","Third Party Advisory",{"url":61,"source":54,"tags":62},"https:\u002F\u002Fgitlab.gnome.org\u002FGNOME\u002Fnautilus\u002F-\u002Fmerge_requests\u002F1001",[58],{"url":64,"source":54,"tags":65},"https:\u002F\u002Fgitlab.gnome.org\u002FGNOME\u002Fnautilus\u002F-\u002Ftree\u002Fmaster",[66],"Product",{"url":68,"source":69,"tags":70},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FPX5CVF4FAHFA6UNKHFBBLOP2NUMIQJAY\u002F","Fedoraproject",[],{"url":72,"source":69,"tags":73},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FXYPDZ7LBBUVU3WFK7DCGDFGK2GXTKGT5\u002F",[],{"url":53,"source":54,"tags":75},[56,57,58,59],{"url":61,"source":54,"tags":77},[58],{"url":64,"source":54,"tags":79},[66],{"url":68,"source":69,"tags":81},[],{"url":72,"source":69,"tags":83},[],10,[86],{"id":87,"name":88,"description":89,"extendedDescription":90,"status":91,"abstraction":92,"structure":93},"CWE-476","NULL Pointer Dereference","The product dereferences a pointer that it expects to be valid but is NULL.","","Stable","Base","Simple",1,false,[],{"title":98,"metaDescription":99,"keywords":100,"canonicalUrl":101,"structuredData":102},"What is CVE-2022-37290? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-37290, a medium severity cyber security vulnerability from 2022. GNOME Nautilus 42.2 allows a NULL pointer dereference and...","CVE-2022-37290, CVE-2022-37290 vulnerability, CVE-2022-37290 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, gnome security, fedoraproject security, nautilus vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2022-37290",{"@context":103,"@type":104,"headline":98,"description":99,"datePublished":9,"dateModified":10,"author":105,"publisher":109,"about":113,"mainEntityOfPage":117,"articleSection":120,"keywords":121},"https:\u002F\u002Fschema.org","TechArticle",{"@type":106,"name":107,"url":108},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":106,"name":107,"url":108,"logo":110},{"@type":111,"url":112},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":114,"name":6,"description":115,"additionalType":116},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":118,"@id":119},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-37290","Cybersecurity","CVE-2022-37290, CVE-2022-37290 vulnerability, CVE-2022-37290 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[123,130],{"Operator":26,"Negate":26,"Nodes":124},[125],{"Operator":126,"Negate":26,"CPEMatch":127},"OR",[128],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":129,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5810B54A-E482-4CA6-82B2-7F5AB8B38336",{"Operator":26,"Negate":26,"Nodes":131},[132],{"Operator":126,"Negate":26,"CPEMatch":133},[134,136],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":135,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":137,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E30D0E6F-4AE8-4284-8716-991DFA48CC5D",[],[],{"lastModified":10,"cacheTime":141,"version":142},1792443233944,"2.0",{"score":144,"band":35,"action":145,"scoredAt":146},40,"Plan remediation","2026-10-16T06:56:16.357573+00:00"]