CVE-2022-27176

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-14 · updated 2026-06-17

Description

Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using 'File Sanitization Library' 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using 'File Sanitization Option'), and RevoWorks Desktop 2.1.84 and prior versions (when using 'File Sanitization Option'), which may allow an attacker to execute a malicious macro by having a user to download, import, and open a specially crafted file in the local environment.

Affected products

J’s Communication Co., Ltd. RevoWorks Browser: before 2.2.69 — fixed in 2.2.69
Jscom Revoworks Desktop: before 2.1.85 — fixed in 2.1.85
J’s Communication Co., Ltd. RevoWorks SCVX: before 1.0.44 — fixed in 1.0.44

How to fix

Upgrade to a fixed version: J’s Communication Co., Ltd. RevoWorks Browser 2.2.69; Jscom Revoworks Desktop 2.1.85; J’s Communication Co., Ltd. RevoWorks SCVX 1.0.44. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-27176 or the next vulnerability affects your stack