2022 CVEs (page 106)
Page 106 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3661 | Medium | 4.3 | 2022-11-01 | Insufficient data validation in Extensions in Google Chrome prior to 107.0.5304.62 allowed a remote attacker who had compromised the renderer process to leak c… |
CVE-2022-3660 | Medium | 4.3 | 2022-11-01 | Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 107.0.5304.62 allowed a remote attacker to hide the contents of the Omnib… |
CVE-2022-3659 | High | 8.8 | 2022-11-01 | Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engage in specific UI in… |
CVE-2022-3658 | High | 8.8 | 2022-11-01 | Use after free in Feedback service on Chrome OS in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed an attacker who convinced a user to install a mali… |
CVE-2022-3657 | High | 8.8 | 2022-11-01 | Use after free in Extensions in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
CVE-2022-3656 | High | 8.8 | 2022-11-01 | Insufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass file system restrictions via a crafted… |
CVE-2022-3655 | High | 8.8 | 2022-11-01 | Heap buffer overflow in Media Galleries in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to po… |
CVE-2022-3654 | High | 8.8 | 2022-11-01 | Use after free in Layout in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2022-3653 | High | 8.8 | 2022-11-01 | Heap buffer overflow in Vulkan in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2022-3652 | High | 8.8 | 2022-11-01 | Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2022-3817 | Medium | 4.3 | 2022-11-01 | A vulnerability has been found in Axiomatic Bento4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component m… |
CVE-2022-3816 | Medium | 4.3 | 2022-11-01 | A vulnerability, which was classified as problematic, was found in Axiomatic Bento4. Affected is an unknown function of the component mp4decrypt. The manipulat… |
CVE-2022-3815 | Medium | 4.3 | 2022-11-01 | A vulnerability, which was classified as problematic, has been found in Axiomatic Bento4. This issue affects some unknown processing of the component mp4decryp… |
CVE-2022-3814 | Medium | 4.3 | 2022-11-01 | A vulnerability classified as problematic was found in Axiomatic Bento4. This vulnerability affects unknown code of the component mp4decrypt. The manipulation… |
CVE-2022-3813 | Medium | 4.3 | 2022-11-01 | A vulnerability classified as problematic has been found in Axiomatic Bento4. This affects an unknown part of the component mp4edit. The manipulation leads to… |
CVE-2022-3812 | Medium | 4.3 | 2022-11-01 | A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is the function AP4_ContainerAtom::AP4_ContainerAtom of… |
CVE-2022-43990 | High | 7.3 | 2022-11-01 | Password recovery vulnerability in SICK SIM1012 Partnumber 1098146 with firmware version <2.2.0 allows an unprivileged remote attacker to gain access to the us… |
CVE-2022-43989 | High | 7.3 | 2022-11-01 | Password recovery vulnerability in SICK SIM2x00 (ARM) Partnumber 1092673 and 1081902 with firmware version < 1.2.0 allows an unprivileged remote attacker to ga… |
CVE-2022-27586 | Critical | 9.8 | 2022-11-01 | Password recovery vulnerability in SICK SIM1004 Partnumber 1098148 with firmware version <2.0.0 allows an unprivileged remote attacker to gain access to the us… |
CVE-2022-27585 | Critical | 9.8 | 2022-11-01 | Password recovery vulnerability in SICK SIM1000 FX Partnumber 1097816 and 1097817 with firmware version <1.6.0 allows an unprivileged remote attacker to gain a… |
CVE-2022-27584 | Critical | 9.8 | 2022-11-01 | Password recovery vulnerability in SICK SIM2000ST Partnumber 1080579 allows an unprivileged remote attacker to gain access to the userlevel defined as Recovera… |
CVE-2022-27582 | Critical | 9.8 | 2022-11-01 | Password recovery vulnerability in SICK SIM4000 (PPC) Partnumber 1078787 allows an unprivileged remote attacker to gain access to the userlevel defined as Reco… |
CVE-2022-42832 | Medium | 6.4 | 2022-11-01 | A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able… |
CVE-2022-42831 | Medium | 6.4 | 2022-11-01 | A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able… |
CVE-2022-42830 | Medium | 6.7 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able… |
CVE-2022-42829 | Medium | 6.7 | 2022-11-01 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privile… |
CVE-2022-42827 | High | 7.8 | 2022-11-01 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An appli… |
CVE-2022-42825 | Medium | 5.5 | 2022-11-01 | This issue was addressed by removing additional entitlements. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Mo… |
CVE-2022-42824 | Medium | 5.5 | 2022-11-01 | A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 1… |
CVE-2022-42823 | High | 8.8 | 2022-11-01 | A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and… |
CVE-2022-42820 | High | 7.8 | 2022-11-01 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app may cause unexp… |
CVE-2022-42819 | Medium | 5.5 | 2022-11-01 | An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may b… |
CVE-2022-42818 | Medium | 5.9 | 2022-11-01 | This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. A user in a privileged network position may be able to track u… |
CVE-2022-42817 | Medium | 6.5 | 2022-11-01 | A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, watchOS 9.1. Visiting… |
CVE-2022-42815 | Medium | 5.5 | 2022-11-01 | This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data. |
CVE-2022-42814 | Medium | 5.5 | 2022-11-01 | A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data. |
CVE-2022-42813 | Critical | 9.8 | 2022-11-01 | A certificate validation issue existed in the handling of WKWebView. This issue was addressed with improved validation. This issue is fixed in tvOS 16.1, iOS 1… |
CVE-2022-42811 | Medium | 5.5 | 2022-11-01 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An… |
CVE-2022-42810 | Medium | 5.5 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13… |
CVE-2022-42809 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted gcx file may lead to unexpecte… |
CVE-2022-42808 | Critical | 9.8 | 2022-11-01 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9… |
CVE-2022-42806 | High | 7.0 | 2022-11-01 | A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app may be able to execute arbitrary… |
CVE-2022-42803 | High | 7.0 | 2022-11-01 | A race condition was addressed with improved locking. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 a… |
CVE-2022-42801 | High | 7.8 | 2022-11-01 | A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and i… |
CVE-2022-42800 | High | 7.8 | 2022-11-01 | This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macO… |
CVE-2022-42799 | Medium | 6.1 | 2022-11-01 | The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiti… |
CVE-2022-42798 | Medium | 5.5 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1… |
CVE-2022-42796 | High | 7.8 | 2022-11-01 | This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.7 and iPadOS 15.7, macOS Ventura 13. An app may be able to gain elevate… |
CVE-2022-42795 | High | 8.8 | 2022-11-01 | A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS Ventura 13, watchOS 9. Processing a malic… |
CVE-2022-42793 | Medium | 5.5 | 2022-11-01 | An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPa… |
CVE-2022-42791 | High | 7.0 | 2022-11-01 | A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel… |
CVE-2022-42790 | Medium | 5.5 | 2022-11-01 | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macO… |
CVE-2022-42789 | Medium | 5.5 | 2022-11-01 | An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An… |
CVE-2022-42788 | Medium | 5.5 | 2022-11-01 | A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Ventura 13. A malicious application may… |
CVE-2022-3807 | Medium | 4.3 | 2022-11-01 | A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Incomple… |
CVE-2022-3444 | Medium | 4.3 | 2022-11-01 | Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a craf… |
CVE-2022-3443 | Medium | 4.3 | 2022-11-01 | Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a craf… |
CVE-2022-3318 | Medium | 4.3 | 2022-11-01 | Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to reboot Chrome OS… |
CVE-2022-3317 | Medium | 4.3 | 2022-11-01 | Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restric… |
CVE-2022-3316 | Medium | 4.3 | 2022-11-01 | Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass security feature via a… |
CVE-2022-3315 | High | 8.8 | 2022-11-01 | Type confusion in Blink in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2022-3314 | Medium | 6.5 | 2022-11-01 | Use after free in logging in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbo… |
CVE-2022-3313 | Medium | 6.5 | 2022-11-01 | Incorrect security UI in full screen in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium… |
CVE-2022-3312 | Medium | 4.6 | 2022-11-01 | Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restric… |
CVE-2022-3311 | Medium | 6.5 | 2022-11-01 | Use after free in import in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbox… |
CVE-2022-3310 | Medium | 6.5 | 2022-11-01 | Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an appl… |
CVE-2022-3309 | Medium | 6.5 | 2022-11-01 | Use after free in assistant in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to engage in specific UI gesture… |
CVE-2022-3308 | High | 7.4 | 2022-11-01 | Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape vi… |
CVE-2022-3307 | High | 8.8 | 2022-11-01 | Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2022-3306 | High | 8.8 | 2022-11-01 | Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
CVE-2022-3305 | High | 8.8 | 2022-11-01 | Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
CVE-2022-32947 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to exec… |
CVE-2022-32946 | Medium | 5.5 | 2022-11-01 | This issue was addressed with improved entitlements. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to record audio using a pair of connecte… |
CVE-2022-32944 | High | 7.8 | 2022-11-01 | A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watch… |
CVE-2022-32941 | Critical | 9.8 | 2022-11-01 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, iOS 16.1 and iPadOS 16, macOS Monte… |
CVE-2022-32940 | High | 7.8 | 2022-11-01 | The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be abl… |
CVE-2022-32939 | High | 7.8 | 2022-11-01 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An app may be able to execute… |
CVE-2022-32938 | Medium | 5.3 | 2022-11-01 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13… |
CVE-2022-32936 | Medium | 5.5 | 2022-11-01 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to disclose kernel memory. |
CVE-2022-32935 | Medium | 4.6 | 2022-11-01 | A lock screen issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, macOS Ventura 13… |
CVE-2022-32934 | High | 8.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. A remote user may be a… |
CVE-2022-32932 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, watchOS 9.1. An app may be… |
CVE-2022-32929 | Medium | 5.5 | 2022-11-01 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 15.7 and iPadOS 15.7, iOS 16.1 and iPa… |
CVE-2022-32928 | Medium | 5.3 | 2022-11-01 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A user in a privileged network position may… |
CVE-2022-32927 | High | 7.5 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. Joining a malicious Wi-Fi n… |
CVE-2022-32926 | Medium | 6.7 | 2022-11-01 | The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 an… |
CVE-2022-32925 | High | 7.1 | 2022-11-01 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to cause unexpe… |
CVE-2022-32924 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Big Sur 11.7, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS… |
CVE-2022-32923 | Medium | 6.5 | 2022-11-01 | A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9… |
CVE-2022-32922 | High | 8.8 | 2022-11-01 | A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13. Processing… |
CVE-2022-32918 | Medium | 5.5 | 2022-11-01 | This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to bypass Privacy preferences. |
CVE-2022-32915 | High | 7.8 | 2022-11-01 | A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel pr… |
CVE-2022-32914 | High | 7.8 | 2022-11-01 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Mon… |
CVE-2022-32913 | Low | 3.3 | 2022-11-01 | The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, w… |
CVE-2022-32910 | High | 7.5 | 2022-11-01 | A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5, Security Update 2022-005 Catalina. An archi… |
CVE-2022-32909 | Medium | 5.5 | 2022-11-01 | The issue was addressed with improved handling of caches. This issue is fixed in iOS 16. An app may be able to access user-sensitive data. |
CVE-2022-32907 | High | 7.8 | 2022-11-01 | This issue was addressed with improved checks. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel priv… |
CVE-2022-32905 | High | 7.8 | 2022-11-01 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted DMG file may lead to a… |
CVE-2022-32904 | Medium | 5.5 | 2022-11-01 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app ma… |
CVE-2022-32903 | High | 7.8 | 2022-11-01 | A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrar… |