CVE-2022-33068

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers...

5.5 MediumFix available

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

1.19%Up 0.3 points since Jun 23, 2022

What each source reports

NVD Score used 5.5

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Record: CVE-2022-33068
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-190
Updated: 2026-11-02

CVE List No score

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Record: CVE-2022-33068
Updated: 2026-11-02

EUVDEUVD-2022-36125 No score

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Record: EUVD-2022-36125
Updated: 2026-11-03

GitHub AdvisoriesGHSA-cq67-chj5-8385 5.5

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers...

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Record: GHSA-cq67-chj5-8385
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-190
Updated: 2026-11-02

OSVALPINE-CVE-2022-33068 5.5

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Record: ALPINE-CVE-2022-33068
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-03

OSVBELL-CVE-2022-33068 5.5

CVE-2022-33068 does not affect BellSoft software

Record: BELL-CVE-2022-33068
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 17 moreShow less

OSVOESA-2022-1777 5.5

harfbuzz security update

HarfBuzz is a text-shaping engine. If you give HarfBuzz a font and a string containing a sequence of Unicode codepoints, HarfBuzz selects and positions the corresponding glyphs from the font, applying all of the necessary layout rules and font features. HarfBuzz then returns the string to you in the form that is correctly arranged for the language and writing system.

Security Fix(es):

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.(CVE-2022-33068)

Record: OESA-2022-1777
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:6999 5.5

Red Hat Security Advisory: java-17-openjdk security and bug fix update

Record: RHSA-2022:6999
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:7000 5.5

Red Hat Security Advisory: java-17-openjdk security and bug fix update

Record: RHSA-2022:7000
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:7012 5.5

Red Hat Security Advisory: java-11-openjdk security and bug fix update

Record: RHSA-2022:7012
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:7013 5.5

Red Hat Security Advisory: java-11-openjdk security and bug fix update

Record: RHSA-2022:7013
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:8384 5.5

Red Hat Security Advisory: harfbuzz security update

Record: RHSA-2022:8384
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2022:8384 5.5

Moderate: harfbuzz security update

HarfBuzz is an implementation of the OpenType Layout engine.

Security Fix(es):

harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc (CVE-2022-33068)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.

Record: RLSA-2022:8384
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2022-33068 5.5

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Record: UBUNTU-CVE-2022-33068
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVALSA-2022:8384 No score

Moderate: harfbuzz security update

HarfBuzz is an implementation of the OpenType Layout engine.

Security Fix(es):

harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc (CVE-2022-33068)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record: ALSA-2022:8384
Updated: 2026-11-02

OSV No score

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Record: CVE-2022-33068
Updated: 2026-11-02

OSVDEBIAN-CVE-2022-33068 No score

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Record: DEBIAN-CVE-2022-33068
Updated: 2026-11-03

OSVopenSUSE-SU-2022:2663-1 No score

Security update for harfbuzz

This update for harfbuzz fixes the following issues:

CVE-2022-33068: Fixed a integer overflow in hb-ot-shape-fallback.cc (bsc#1200900).

Record: openSUSE-SU-2022:2663-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:12168-1 No score

harfbuzz-devel-4.4.1-1.1 on GA media

These are all security issues fixed in the harfbuzz-devel-4.4.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:12168-1
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-11-CVE-2022-33068 No score

CVE-2022-33068 in harfbuzz - Patched by Root

Root has patched CVE-2022-33068 in the harfbuzz package for Root:Debian:11. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-11-CVE-2022-33068
Updated: 2026-11-02

OSVSUSE-SU-2022:2663-1 No score

Security update for harfbuzz

This update for harfbuzz fixes the following issues:

CVE-2022-33068: Fixed a integer overflow in hb-ot-shape-fallback.cc (bsc#1200900).

Record: SUSE-SU-2022:2663-1
Updated: 2026-11-02

OSVSUSE-SU-2022:2664-1 No score

Security update for harfbuzz

This update for harfbuzz fixes the following issues:

CVE-2022-33068: Fixed a integer overflow in hb-ot-shape-fallback.cc (bsc#1200900).

Record: SUSE-SU-2022:2664-1
Updated: 2026-11-02

OSVUSN-5524-1 No score

harfbuzz vulnerability

It was discovered that HarfBuzz incorrectly handled certain glyph sizes. A remote attacker could use this issue to cause HarfBuzz to crash, resulting in a denial of service.

Record: USN-5524-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`harfbuzz` Alpine:v3.17	before 4.4.1-r0	4.4.1-r0
`harfbuzz` Alpine:v3.18	before 4.4.1-r0	4.4.1-r0
`harfbuzz` Alpine:v3.19	before 4.4.1-r0	4.4.1-r0
`harfbuzz` Alpine:v3.20	before 4.4.1-r0	4.4.1-r0
`harfbuzz` Alpine:v3.21	before 4.4.1-r0	4.4.1-r0
`harfbuzz` Alpine:v3.22	before 4.4.1-r0	4.4.1-r0
`harfbuzz` Alpine:v3.23	before 4.4.1-r0	4.4.1-r0
`harfbuzz` Alpine:v3.24	before 4.4.1-r0	4.4.1-r0
`harfbuzz` AlmaLinux:9	before 2.7.4-8.el9	2.7.4-8.el9
`harfbuzz-devel` AlmaLinux:9	before 2.7.4-8.el9	2.7.4-8.el9

Show 201 moreShow less

Affected packages
Package	Affected	Fixed
`harfbuzz-icu` AlmaLinux:9	before 2.7.4-8.el9	2.7.4-8.el9
`harfbuzz` Debian:12	before 5.2.0-2	5.2.0-2
`harfbuzz` Debian:13	before 5.2.0-2	5.2.0-2
`harfbuzz` Debian:14	before 5.2.0-2	5.2.0-2
`harfbuzz` openEuler:20.03-LTS-SP1	before 2.8.1-3.oe1	2.8.1-3.oe1
`harfbuzz` openEuler:20.03-LTS-SP3	before 2.8.1-3.oe1	2.8.1-3.oe1
`harfbuzz` openEuler:22.03-LTS	before 2.8.2-3.oe2203	2.8.2-3.oe2203
`java-17-openjdk` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-demo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-devel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-headless` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-headless-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-javadoc` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-javadoc-zip` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-jmods` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-src` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-static-libs` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-debugsource` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-demo-fastdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-demo-slowdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-devel-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-devel-fastdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-devel-fastdebug-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-devel-slowdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-devel-slowdebug-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-fastdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-fastdebug-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-headless-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-headless-fastdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-headless-fastdebug-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-headless-slowdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-headless-slowdebug-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-jmods-fastdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-jmods-slowdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-slowdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-slowdebug-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-src-fastdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-src-slowdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-static-libs-fastdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk-static-libs-slowdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0
`java-17-openjdk` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-demo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-devel` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-devel-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-headless` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-headless-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-javadoc` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-javadoc-zip` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-jmods` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-src` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-static-libs` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-debugsource` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-demo-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-demo-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-devel-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-devel-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-devel-fastdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-devel-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-devel-slowdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-fastdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-headless-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-headless-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-headless-fastdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-headless-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-headless-slowdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-jmods-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-jmods-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-slowdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-src-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-src-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-static-libs-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-17-openjdk-static-libs-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:17.0.5.0.8-2.el8_6	1:17.0.5.0.8-2.el8_6
`java-11-openjdk` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-demo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-devel` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-devel-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-headless` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-headless-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-javadoc` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-javadoc-zip` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-jmods` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-src` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-static-libs` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-debugsource` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-demo-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-demo-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-devel-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-devel-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-devel-fastdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-devel-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-devel-slowdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-fastdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-headless-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-headless-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-headless-fastdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-headless-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-headless-slowdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-jmods-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-jmods-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-slowdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-src-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-src-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-static-libs-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk-static-libs-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el8_6	1:11.0.17.0.8-2.el8_6
`java-11-openjdk` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-demo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-devel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-headless` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-headless-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-javadoc` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-javadoc-zip` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-jmods` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-src` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-static-libs` Red Hat:enterprise_linux:9::appstream From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-debugsource` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-demo-fastdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-demo-slowdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-devel-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-devel-fastdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-devel-fastdebug-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-devel-slowdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-devel-slowdebug-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-fastdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-fastdebug-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-headless-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-headless-fastdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-headless-fastdebug-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-headless-slowdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-headless-slowdebug-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-jmods-fastdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-jmods-slowdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-slowdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-slowdebug-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-src-fastdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-src-slowdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-static-libs-fastdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`java-11-openjdk-static-libs-slowdebug` Red Hat:enterprise_linux:9::crb From an advisory covering 7 CVEs	before 1:11.0.17.0.8-2.el9_0	1:11.0.17.0.8-2.el9_0
`harfbuzz` Red Hat:enterprise_linux:9::appstream	before 0:2.7.4-8.el9	0:2.7.4-8.el9
`harfbuzz-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:2.7.4-8.el9	0:2.7.4-8.el9
`harfbuzz-debugsource` Red Hat:enterprise_linux:9::appstream	before 0:2.7.4-8.el9	0:2.7.4-8.el9
`harfbuzz-devel` Red Hat:enterprise_linux:9::appstream	before 0:2.7.4-8.el9	0:2.7.4-8.el9
`harfbuzz-devel-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:2.7.4-8.el9	0:2.7.4-8.el9
`harfbuzz-icu` Red Hat:enterprise_linux:9::appstream	before 0:2.7.4-8.el9	0:2.7.4-8.el9
`harfbuzz-icu-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:2.7.4-8.el9	0:2.7.4-8.el9
`harfbuzz` Red Hat:enterprise_linux:9::baseos	before 0:2.7.4-8.el9	0:2.7.4-8.el9
`harfbuzz-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:2.7.4-8.el9	0:2.7.4-8.el9
`harfbuzz-debugsource` Red Hat:enterprise_linux:9::baseos	before 0:2.7.4-8.el9	0:2.7.4-8.el9
`harfbuzz-devel-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:2.7.4-8.el9	0:2.7.4-8.el9
`harfbuzz-icu-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:2.7.4-8.el9	0:2.7.4-8.el9
`harfbuzz` Rocky Linux:9	before 0:2.7.4-8.el9	0:2.7.4-8.el9
`harfbuzz` Root:Debian:11	before 2.7.4-1.root.io.2	2.7.4-1.root.io.22.7.4-1.root.io.62.7.4-1.root.io.32.7.4-1.root.io.42.7.4-1.root.io.52.7.4-1.aikido.82.7.4-1.root.io.7
`rootio-harfbuzz` Root:Debian:11	before 2.7.4-1.root.io.2	2.7.4-1.root.io.22.7.4-1.root.io.62.7.4-1.root.io.32.7.4-1.root.io.42.7.4-1.root.io.52.7.4-1.aikido.82.7.4-1.root.io.7
`harfbuzz` SUSE:Linux Enterprise Module for Basesystem 15 SP3	before 2.6.4-150200.3.3.1	2.6.4-150200.3.3.1
`harfbuzz` SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS	before 2.6.4-150200.3.3.1	2.6.4-150200.3.3.1
`harfbuzz` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 2.6.4-150200.3.3.1	2.6.4-150200.3.3.1
`harfbuzz` SUSE:Linux Enterprise Server 15 SP2-BCL	before 2.6.4-150200.3.3.1	2.6.4-150200.3.3.1
`harfbuzz` SUSE:Linux Enterprise Server 15 SP2-LTSS	before 2.6.4-150200.3.3.1	2.6.4-150200.3.3.1
`harfbuzz` SUSE:Linux Enterprise Server for SAP Applications 15 SP2	before 2.6.4-150200.3.3.1	2.6.4-150200.3.3.1
`harfbuzz` SUSE:Manager Proxy 4.1	before 2.6.4-150200.3.3.1	2.6.4-150200.3.3.1
`harfbuzz` SUSE:Manager Retail Branch Server 4.1	before 2.6.4-150200.3.3.1	2.6.4-150200.3.3.1
`harfbuzz` SUSE:Manager Server 4.1	before 2.6.4-150200.3.3.1	2.6.4-150200.3.3.1
`harfbuzz` SUSE:Linux Enterprise Micro 5.2	before 2.6.4-150200.3.3.1	2.6.4-150200.3.3.1
`harfbuzz` SUSE:Enterprise Storage 7	before 2.6.4-150200.3.3.1	2.6.4-150200.3.3.1
`harfbuzz` openSUSE:Leap 15.3	before 2.6.4-150200.3.3.1	2.6.4-150200.3.3.1
`harfbuzz` SUSE:Linux Enterprise Module for Basesystem 15 SP4	before 3.4.0-150400.3.3.1	3.4.0-150400.3.3.1
`harfbuzz` openSUSE:Leap 15.4	before 3.4.0-150400.3.3.1	3.4.0-150400.3.3.1
`openjdk-9` Ubuntu:16.04:LTS	All versions, plus listed versions 9~b88-19~b101-2ubuntu29~b102-19~b113-0ubuntu19~b114-0ubuntu1	None known
`qtwebengine-opensource-src` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.9.1+dfsg-45.9.1+dfsg-4ubuntu15.9.2+dfsg-2ubuntu15.9.3+dfsg-0ubuntu15.9.4+dfsg-0ubuntu15.9.5+dfsg-0ubuntu25.9.5+dfsg-0ubuntu2+esm1	None known
`harfbuzz` Ubuntu:20.04:LTS	before 2.6.4-1ubuntu4.2, plus listed versions 2.6.1-32.6.2-12.6.4-12.6.4-1ubuntu12.6.4-1ubuntu22.6.4-1ubuntu32.6.4-1ubuntu4	2.6.4-1ubuntu4.2
`qtwebengine-opensource-src` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.12.4+dfsg-1ubuntu15.12.4+dfsg-1ubuntu35.12.5+dfsg-3ubuntu15.12.5+dfsg-6ubuntu25.12.5+dfsg-7 Show 4 moreShow less 5.12.5+dfsg-7build15.12.8+dfsg-0ubuntu15.12.8+dfsg-0ubuntu1.15.12.8+dfsg-0ubuntu1.1+esm1	None known
`harfbuzz` Ubuntu:22.04:LTS	before 2.7.4-1ubuntu3.1, plus listed versions 2.7.4-1ubuntu12.7.4-1ubuntu22.7.4-1ubuntu3	2.7.4-1ubuntu3.1
`qt6-base` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.2+dfsg-5ubuntu16.2.2+dfsg-6ubuntu16.2.2+dfsg-6ubuntu26.2.4+dfsg-1ubuntu16.2.4+dfsg-2ubuntu16.2.4+dfsg-2ubuntu1.1	None known
`qtwebengine-opensource-src` Ubuntu:Pro:22.04:LTS	All versions, plus listed versions 5.15.6+dfsg-15.15.6+dfsg-25.15.7+dfsg-25.15.8+dfsg-15.15.8+dfsg-1build1 Show 4 moreShow less 5.15.8+dfsg-1build25.15.8+dfsg-25.15.9+dfsg-15.15.9+dfsg-1ubuntu0.1~esm1	None known
`qt6-base` Ubuntu:24.04:LTS	All versions, plus listed versions 6.4.2+dfsg-186.4.2+dfsg-196.4.2+dfsg-19build16.4.2+dfsg-206.4.2+dfsg-216.4.2+dfsg-21.1build46.4.2+dfsg-21.1build5	None known
`qtwebengine-opensource-src` Ubuntu:Pro:24.04:LTS	All versions, plus listed versions 5.15.15+dfsg-25.15.15+dfsg-2build25.15.15+dfsg-2ubuntu15.15.16+dfsg-15.15.16+dfsg-1ubuntu25.15.16+dfsg-1ubuntu45.15.16+dfsg-35.15.16+dfsg-3ubuntu0.1~esm1	None known
`qt6-base` Ubuntu:25.10	All versions, plus listed versions 6.8.3+dfsg-0ubuntu26.8.3+dfsg-0ubuntu36.9.2+dfsg-1ubuntu1	None known
`qtwebengine-opensource-src` Ubuntu:25.10	All versions, plus listed versions 5.15.18+dfsg-25.15.18+dfsg-2build15.15.19+dfsg-15.15.19+dfsg2-1	None known
`qt6-base` Ubuntu:26.10	All versions, plus listed versions 6.10.2+dfsg-76.10.2+dfsg-14ubuntu26.10.2+dfsg-156.10.2+dfsg-166.11.2+dfsg-4ubuntu2	None known
`qtwebengine-opensource-src` Ubuntu:26.10	All versions, plus listed versions 5.15.19+dfsg2-45.15.19+dfsg2-65.15.19+dfsg2-7	None known
`qt6-base` Ubuntu:26.04:LTS	All versions, plus listed versions 6.9.2+dfsg-1ubuntu16.9.2+dfsg-26.9.2+dfsg-3ubuntu16.9.2+dfsg-3ubuntu26.9.2+dfsg-46.10.2+dfsg-36.10.2+dfsg-66.10.2+dfsg-7	None known
`qtwebengine-opensource-src` Ubuntu:Pro:26.04:LTS	All versions, plus listed versions 5.15.19+dfsg2-15.15.19+dfsg2-1build15.15.19+dfsg2-25.15.19+dfsg2-35.15.19+dfsg2-45.15.19+dfsg2-4ubuntu0.1~esm1	None known
`harfbuzz` openSUSE:Leap Micro 5.2	before 2.6.4-150200.3.3.1	2.6.4-150200.3.3.1
`harfbuzz` openSUSE:Tumbleweed	before 4.4.1-1.1	4.4.1-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts	OSV
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-33068 is a medium vulnerability (CVSS 5.5) in Harfbuzz Project Harfbuzz, published June 22, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.19%, the 68th percentile. Fixed in harfbuzz 4.4.1-r0.

References

Show 62 moreShow less