2022 CVEs (page 101)
Page 101 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-41099 | Medium | 4.6 | 2022-11-09 | BitLocker Security Feature Bypass Vulnerability |
CVE-2022-41098 | Medium | 5.5 | 2022-11-09 | Windows GDI+ Information Disclosure Vulnerability |
CVE-2022-41097 | Medium | 6.5 | 2022-11-09 | Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability |
CVE-2022-41096 | High | 7.8 | 2022-11-09 | Microsoft DWM Core Library Elevation of Privilege Vulnerability |
CVE-2022-41095 | High | 7.8 | 2022-11-09 | Windows Digital Media Receiver Elevation of Privilege Vulnerability |
CVE-2022-41093 | High | 7.8 | 2022-11-09 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2022-41092 | High | 7.8 | 2022-11-09 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2022-41091 | Medium | 5.4 | 2022-11-09 | Windows Mark of the Web Security Feature Bypass Vulnerability |
CVE-2022-41090 | Medium | 5.9 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability |
CVE-2022-41088 | High | 8.1 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-41086 | Medium | 6.4 | 2022-11-09 | Windows Group Policy Elevation of Privilege Vulnerability |
CVE-2022-41085 | High | 7.5 | 2022-11-09 | Azure CycleCloud Elevation of Privilege Vulnerability |
CVE-2022-41080 | High | 8.8 | 2022-11-09 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2022-41079 | High | 8.0 | 2022-11-09 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2022-41078 | High | 8.0 | 2022-11-09 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2022-41073 | High | 7.8 | 2022-11-09 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-41066 | Medium | 4.4 | 2022-11-09 | Microsoft Dynamics Business Central Information Disclosure Vulnerability |
CVE-2022-41064 | Medium | 5.8 | 2022-11-09 | .NET Framework Information Disclosure Vulnerability |
CVE-2022-41063 | High | 7.8 | 2022-11-09 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2022-41062 | High | 8.8 | 2022-11-09 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-41061 | High | 7.8 | 2022-11-09 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2022-41060 | Medium | 5.5 | 2022-11-09 | Microsoft Word Information Disclosure Vulnerability |
CVE-2022-41058 | High | 7.5 | 2022-11-09 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2022-41057 | High | 7.8 | 2022-11-09 | Windows HTTP.sys Elevation of Privilege Vulnerability |
CVE-2022-41056 | High | 7.5 | 2022-11-09 | Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability |
CVE-2022-41055 | Medium | 5.5 | 2022-11-09 | Windows Human Interface Device Information Disclosure Vulnerability |
CVE-2022-41054 | High | 7.8 | 2022-11-09 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2022-41053 | High | 7.5 | 2022-11-09 | Windows Kerberos Denial of Service Vulnerability |
CVE-2022-41052 | High | 7.8 | 2022-11-09 | Windows Graphics Component Remote Code Execution Vulnerability |
CVE-2022-41051 | High | 7.8 | 2022-11-09 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2022-41050 | High | 7.8 | 2022-11-09 | Windows Extensible File Allocation Table Elevation of Privilege Vulnerability |
CVE-2022-41049 | Medium | 5.4 | 2022-11-09 | Windows Mark of the Web Security Feature Bypass Vulnerability |
CVE-2022-41048 | High | 8.8 | 2022-11-09 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2022-41047 | High | 8.8 | 2022-11-09 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2022-41045 | High | 7.8 | 2022-11-09 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2022-41044 | High | 8.1 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-41039 | High | 8.1 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-39893 | Low | 3.3 | 2022-11-09 | Sensitive information exposure vulnerability in FmmBaseModel in Galaxy Buds Pro Manage prior to version 4.1.22092751 allows local attackers with log access per… |
CVE-2022-39892 | Low | 3.6 | 2022-11-09 | Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature. |
CVE-2022-39891 | Medium | 4.3 | 2022-11-09 | Heap overflow vulnerability in parse_pce function in libsavsaudio.so in Editor Lite prior to version 4.0.41.3 allows attacker to get information. |
CVE-2022-39890 | Medium | 6.2 | 2022-11-09 | Improper Authorization in Samsung Billing prior to version 5.0.56.0 allows attacker to get sensitive information. |
CVE-2022-39889 | Medium | 4.0 | 2022-11-09 | Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows attackers to access wearable device in… |
CVE-2022-39887 | Medium | 4.3 | 2022-11-09 | Improper access control vulnerability in clearAllGlobalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to configure EDM setting. |
CVE-2022-39886 | Medium | 5.9 | 2022-11-09 | Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local attacker to access Device information. |
CVE-2022-39885 | Medium | 5.9 | 2022-11-09 | Improper access control vulnerability in BootCompletedReceiver_CMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Devi… |
CVE-2022-39884 | Medium | 4.3 | 2022-11-09 | Improper access control vulnerability in IImsService prior to SMR Nov-2022 Release 1 allows local attacker to access to Call information. |
CVE-2022-39883 | Medium | 4.0 | 2022-11-09 | Improper authorization vulnerability in StorageManagerService prior to SMR Nov-2022 Release 1 allows local attacker to call privileged API. |
CVE-2022-39882 | High | 8.0 | 2022-11-09 | Heap overflow vulnerability in sflacf_fal_bytes_peek function in libsmat.so library prior to SMR Nov-2022 Release 1 allows local attacker to execute arbitrary… |
CVE-2022-39881 | Medium | 5.3 | 2022-11-09 | Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds me… |
CVE-2022-39880 | High | 7.1 | 2022-11-09 | Improper input validation vulnerability in DualOutFocusViewer prior to SMR Nov-2022 Release 1 allows local attacker to perform an arbitrary code execution. |
CVE-2022-39879 | Medium | 5.9 | 2022-11-09 | Improper authorization vulnerability in?CallBGProvider prior to SMR Nov-2022 Release 1 allows local attacker to grant permission for accessing information with… |
CVE-2022-39306 | Medium | 6.4 | 2022-11-09 | Grafana is an open-source platform for monitoring and observability. Versions prior to 9.2.4, or 8.5.15 on the 8.X branch, are subject to Improper Input Valida… |
CVE-2022-38023 | High | 8.1 | 2022-11-09 | Netlogon RPC Elevation of Privilege Vulnerability |
CVE-2022-38015 | Medium | 6.5 | 2022-11-09 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2022-38014 | High | 7.0 | 2022-11-09 | Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability |
CVE-2022-37992 | High | 7.8 | 2022-11-09 | Windows Group Policy Elevation of Privilege Vulnerability |
CVE-2022-37967 | High | 7.2 | 2022-11-09 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2022-37966 | High | 8.1 | 2022-11-09 | Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability |
CVE-2022-44563 | Medium | 5.9 | 2022-11-09 | There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-44562 | Critical | 9.8 | 2022-11-09 | The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege esc… |
CVE-2022-44561 | High | 7.5 | 2022-11-09 | The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary wid… |
CVE-2022-44560 | Medium | 5.3 | 2022-11-09 | The launcher module has an Intent redirection vulnerability. Successful exploitation of this vulnerability may cause launcher module data to be modified. |
CVE-2022-44559 | Critical | 9.8 | 2022-11-09 | The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. |
CVE-2022-44558 | Critical | 9.8 | 2022-11-09 | The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation. |
CVE-2022-44557 | High | 7.5 | 2022-11-09 | The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files. Successful exploitation of this vul… |
CVE-2022-44555 | High | 7.5 | 2022-11-09 | The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable. |
CVE-2022-44554 | High | 7.5 | 2022-11-09 | The power module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause abnormal status of a module on the dev… |
CVE-2022-44553 | Medium | 5.3 | 2022-11-09 | The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploita… |
CVE-2022-44552 | High | 7.5 | 2022-11-09 | The lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-44551 | Critical | 9.8 | 2022-11-09 | The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availabilit… |
CVE-2022-44550 | High | 7.5 | 2022-11-09 | The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availabilit… |
CVE-2022-44549 | High | 7.5 | 2022-11-09 | The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to access the geofencing… |
CVE-2022-44548 | Medium | 4.3 | 2022-11-09 | There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog bo… |
CVE-2022-44547 | High | 7.5 | 2022-11-09 | The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the display service availability. |
CVE-2022-44546 | High | 7.5 | 2022-11-09 | The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released. Successful exploitation of this vulnerabili… |
CVE-2022-43310 | High | 7.8 | 2022-11-09 | An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libr… |
CVE-2022-43058 | Critical | 9.8 | 2022-11-09 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=delet… |
CVE-2022-43031 | High | 8.8 | 2022-11-09 | DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add Administrator accounts and modify Admin… |
CVE-2022-31689 | Critical | 9.8 | 2022-11-09 | VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a valid session token may be able to authen… |
CVE-2022-31688 | Medium | 6.1 | 2022-11-09 | VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious… |
CVE-2022-31687 | Critical | 9.8 | 2022-11-09 | VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability. A malicious actor with network access to Workspace ONE Assist may be… |
CVE-2022-31686 | Critical | 9.8 | 2022-11-09 | VMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability. A malicious actor with network access to Workspace ONE Assist… |
CVE-2022-31685 | Critical | 9.8 | 2022-11-09 | VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability. A malicious actor with network access to Workspace ONE Assist may b… |
CVE-2022-29836 | Low | 1.9 | 2022-11-09 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability was discovered via an HTTP API on Western Digital My Cloud Home; M… |
CVE-2022-27674 | High | 7.5 | 2022-11-09 | Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel cra… |
CVE-2022-27673 | High | 7.5 | 2022-11-09 | Insufficient access controls in the AMD Link Android app may potentially result in information disclosure. |
CVE-2022-23831 | High | 7.5 | 2022-11-09 | Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash re… |
CVE-2022-23824 | Medium | 5.5 | 2022-11-09 | IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure. |
CVE-2022-42966 | Medium | 5.9 | 2022-11-09 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to th… |
CVE-2022-42965 | Low | 3.7 | 2022-11-09 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply… |
CVE-2022-42964 | Medium | 5.9 | 2022-11-09 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input t… |
CVE-2022-3450 | High | 8.8 | 2022-11-09 | Use after free in Peer Connection in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2022-3449 | High | 8.8 | 2022-11-09 | Use after free in Safe Browsing in Google Chrome prior to 106.0.5249.119 allowed an attacker who convinced a user to install a malicious extension to potential… |
CVE-2022-3448 | High | 8.8 | 2022-11-09 | Use after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote attacker who convinced a user to engage in specific UI gestures to… |
CVE-2022-3447 | Medium | 4.3 | 2022-11-09 | Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacker to spoof the contents of the Omnibox… |
CVE-2022-3446 | High | 8.8 | 2022-11-09 | Heap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2022-3445 | High | 8.8 | 2022-11-09 | Use after free in Skia in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2022-32588 | High | 7.8 | 2022-11-09 | An out-of-bounds write vulnerability exists in the PICT parsing pctwread_14841 functionality of Accusoft ImageGear 20.0. A specially-crafted malformed file can… |
CVE-2022-30543 | High | 8.8 | 2022-11-09 | A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted series of network req… |
CVE-2022-29888 | High | 8.1 | 2022-11-09 | A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted HTTP req… |