onyx

onyx --cves cve-2022-3786

CVE-2022-3786

HIGHPOCNode.js
score
<0.1
cvss
7.5
epss
92.5%
published
2022-11-01
kev added
—
first seen

A buffer overrun can be triggered in X.509 certificate verification during name constraint checking, caused by malicious email addresses in certificates, letting attackers cause crashes or denial of service, exploit requires either a maliciously signed certificate or continued verification despite failure.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2022-11-01 — PublishedP2026-10-21 — Tracked by OnyxT2026-10-21 — Public PoCXscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 92.5%2026-09-23: epss 92.5%2026-09-24: epss 92.5%2026-09-25: epss 92.5%2026-09-26: epss 92.5%2026-09-27: epss 92.5%2026-09-28: epss 92.5%2026-09-29: epss 92.5%2026-09-30: epss 92.5%2026-10-01: epss 92.5%2026-10-02: epss 92.5%2026-10-03: epss 92.5%2026-10-04: epss 92.5%2026-10-05: epss 92.5%2026-10-06: epss 92.5%2026-10-07: epss 92.5%2026-10-08: epss 92.5%2026-10-09: epss 92.5%2026-10-10: epss 92.5%2026-10-11: epss 92.5%2026-10-12: epss 92.5%2026-10-13: epss 92.5%2026-10-14: epss 92.5%2026-10-15: epss 92.5%2026-10-16: epss 92.5%2026-10-18: epss 92.5%2026-10-19: epss 92.5%2026-10-20: epss 92.5%2026-10-21: epss 92.5%92.5%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx
  3. Public PoC

Exploit availability

Public PoC flagged by vulnx; no direct exploit link among the citations.

Weaknesses

CWE-120

References 5