CVE-2022-25926 HIGH

CVE-2022-25926

Vendor N/A

Product window-control

Weakness CWE-78

Published January 4, 2023

Last update April 10, 2025

View on NVD All CVEs

CVSS base score

7.4/10

Attack vector Local

Attack complexity High

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P

What the vulnerability does

01Description

Versions of the package window-control before 1.4.5 are vulnerable to Command Injection via the sendKeys function, due to improper input sanitization.

Key dates

02Disclosure timeline

January 4, 2023 CVE published

April 10, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-25926 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/78.html

Related vulnerabilities

CVE-2022-25926

01Description

02Disclosure timeline

03References

04Related CVE