CVE-2022-32969

MEDIO 5.9CVE-2022-32969 · Published 29/06/2022 · updated 17/06/2026

En resumen

CVE-2022-32969 es una vulnerabilidad MEDIO (CVSS 5.9) que afecta a metamask (metamask).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.8%, mayor que el 78.9% de las vulnerabilidades.
Solución: actualizar a 10.11.3 o posterior.

Package	Affected versions	Patched versions
metamask metamask	`< 10.11.3`	`10.11.3`

Description

MetaMask before 10.11.3 might allow an attacker to access a user's secret recovery phrase because an input field is used for a BIP39 mnemonic, and Firefox and Chromium save such fields to disk in order to support the Restore Session feature, aka the Demonic issue.

References

MetaMask/metamask-extension · Patch
halborn.com/disclosures/demonic-vulnerability · Third Party Advisory
halborn.com/halborn-discovers-critical-vulnerability-affecting-crypto-wallet-browser-extensions · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free