« Back to list

CVE-2022-29505

Status: ModifiedHigh (7.8)—

Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Linecorp — Line

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2022-29505",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.4,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "dl_cve@linecorp.com",
      "affectedData": [
        {
          "vendor": "LINE Corporation",
          "product": "LINE for Windows",
          "versions": [
            {
              "status": "affected",
              "version": "<"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-04-27T15:15:09.197",
  "references": [
    {
      "url": "https://hackerone.com/reports/1423049",
      "tags": [
        "Permissions Required",
        "Third Party Advisory"
      ],
      "source": "dl_cve@linecorp.com"
    },
    {
      "url": "https://hackerone.com/reports/1423049",
      "tags": [
        "Permissions Required",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation."
    },
    {
      "lang": "es",
      "value": "Debido a una configuración errónea en la dependencia de openssl, LINE para Windows versiones anteriores sa 7.8. es vulnerable a una inyección de DLL que podría conllevar a una escalada de privilegios"
    }
  ],
  "lastModified": "2026-06-17T04:40:19.823",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:linecorp:line:*:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B0CDC0B-0224-4B8A-9047-BAB94823351F",
              "versionEndExcluding": "7.8"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "dl_cve@linecorp.com"
}