CVE-2022-27810

It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciously formed JavaScript. This condition was only possible to trigger in dev-mode (when asserts were enabled). This issue affects Hermes versions prior to v0.12.0.

• CWE-674
• CWE-674

• https://www.facebook.com/security/advisories/cve-2022-27810Third Party Advisory
• https://www.facebook.com/security/advisories/cve-2022-27810Third Party Advisory

Published

Oct 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27804An os command injection vulnerability exists in the web inte…9.8
• CVE-2022-27805An authentication bypass vulnerability exists in the GHOME c…9.8
• CVE-2022-27806On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, a…7.2
• CVE-2022-27807Improper input validation vulnerability in Link of Cybozu Ga…4.3
• CVE-2022-27808Insufficient control flow management in some Intel(R) Ethern…7.8
• CVE-2022-2781In affected versions of Octopus Server it was identified tha…5.3
• CVE-2022-27811GNOME OCRFeeder before 0.8.4 allows OS command injection via…9.8
• CVE-2022-27812Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.…7.5
• CVE-2022-27813Motorola MTM5000 series firmwares lack properly configured m…8.2
• CVE-2022-27814SWHKD 1.1.5 allows arbitrary file-existence tests via the -c…3.3
• CVE-2022-27815SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There…7.8
• CVE-2022-27816SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There…7.1