2022 CVEs (page 121)
Page 121 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-39808 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in S… |
CVE-2022-39807 | Medium | 5.5 | 2022-10-11 | Due to lack of proper memory management, when a victim opens manipulated SolidWorks Drawing (.sldasm, CoreCadTranslator.exe) file received from untrusted sourc… |
CVE-2022-39806 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Drawing (.slddrw, CoreCadTranslator.exe) file received from untrusted sou… |
CVE-2022-39805 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Computer Graphics Metafile (.cgm, CgmTranslator.exe) file received from untrusted so… |
CVE-2022-39804 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Part (.sldprt, CoreCadTranslator.exe) file received from untrusted source… |
CVE-2022-39803 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated ACIS Part and Assembly (.sat, CoreCadTranslator.exe) file received from untrusted so… |
CVE-2022-39802 | High | 7.5 | 2022-10-11 | SAP Manufacturing Execution - versions 15.1, 15.2, 15.3, allows an attacker to exploit insufficient validation of a file path request parameter. The intended f… |
CVE-2022-39800 | Medium | 6.1 | 2022-10-11 | SAP BusinessObjects BI LaunchPad - versions 420, 430, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of… |
CVE-2022-39015 | Medium | 6.5 | 2022-10-11 | Under certain conditions, BOE AdminTools/ BOE SDK allows an attacker to access information which would otherwise be restricted. |
CVE-2022-39013 | High | 7.6 | 2022-10-11 | Under certain conditions an authenticated attacker can get access to OS credentials. Getting access to OS credentials enables the attacker to modify system dat… |
CVE-2022-38138 | High | 7.5 | 2022-10-11 | The Triangle Microworks IEC 61850 Library (Any client or server using the C language library with a version number of 11.2.0 or earlier and any client or serve… |
CVE-2022-35299 | Critical | 9.8 | 2022-10-11 | SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corruption, su… |
CVE-2022-35297 | Medium | 5.4 | 2022-10-11 | The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being served to other use… |
CVE-2022-35296 | Medium | 4.9 | 2022-10-11 | Under certain conditions, the application SAP BusinessObjects Business Intelligence Platform (Version Management System) exposes sensitive information to an ac… |
CVE-2022-35226 | Medium | 6.1 | 2022-10-11 | SAP Data Services Management allows an attacker to copy the data from a request and echoed into the application's immediate response, it will lead to a Cross-S… |
CVE-2022-31682 | Medium | 4.9 | 2022-10-11 | VMware Aria Operations contains an arbitrary file read vulnerability. A malicious actor with administrative privileges may be able to read arbitrary files cont… |
CVE-2022-38086 | Medium | 5.4 | 2022-10-11 | Cross-Site Request Forgery (CSRF) vulnerability in Shortcodes Ultimate plugin <= 5.12.0 at WordPress leading to plugin preset settings change. |
CVE-2022-20440 | Medium | 5.5 | 2022-10-11 | In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242259918 |
CVE-2022-20439 | Medium | 5.5 | 2022-10-11 | In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242266172 |
CVE-2022-20438 | Medium | 5.5 | 2022-10-11 | In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242259920 |
CVE-2022-20437 | Medium | 5.5 | 2022-10-11 | In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242258929 |
CVE-2022-20436 | High | 7.8 | 2022-10-11 | There is an unauthorized service in the system service. Since the component does not have permission check, resulting in Local Elevation of privilege.Product… |
CVE-2022-20435 | High | 7.8 | 2022-10-11 | There is a Unauthorized service in the system service, may cause the system reboot. Since the component does not have permission check and permission protectio… |
CVE-2022-20434 | High | 7.8 | 2022-10-11 | There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of privilege.P… |
CVE-2022-20433 | High | 7.8 | 2022-10-11 | There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of privilege.P… |
CVE-2022-20432 | High | 7.8 | 2022-10-11 | There is an missing authorization issue in the system service. Since the component does not have permission check and permission protection,, resulting in Loca… |
CVE-2022-20431 | High | 7.8 | 2022-10-11 | There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of privilege.P… |
CVE-2022-20430 | High | 7.8 | 2022-10-11 | There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of privilege.P… |
CVE-2022-20429 | High | 8.8 | 2022-10-11 | In CarSettings of app packages, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth s… |
CVE-2022-20425 | Medium | 5.5 | 2022-10-11 | In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent degradation of performance due to resource exhaustion. This could lead to local den… |
CVE-2022-20423 | Medium | 4.6 | 2022-10-11 | In rndis_set_response of rndis.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a mal… |
CVE-2022-20422 | High | 7.0 | 2022-10-11 | In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of priv… |
CVE-2022-20421 | High | 7.8 | 2022-10-11 | In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege wit… |
CVE-2022-20420 | High | 7.8 | 2022-10-11 | In getBackgroundRestrictionExemptionReason of AppRestrictionController.java, there is a possible way to bypass device policy restrictions due to a logic error… |
CVE-2022-20419 | High | 7.8 | 2022-10-11 | In setOptions of ActivityRecord.java, there is a possible load any arbitrary Java code into launcher process due to a logic error in the code. This could lead… |
CVE-2022-20418 | High | 7.5 | 2022-10-11 | In pickStartSeq of AAVCAssembler.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wi… |
CVE-2022-20417 | High | 7.8 | 2022-10-11 | In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of priv… |
CVE-2022-20416 | High | 7.8 | 2022-10-11 | In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of priv… |
CVE-2022-20415 | High | 7.8 | 2022-10-11 | In handleFullScreenIntent of StatusBarNotificationActivityStarter.java, there is a possible bypass of the restriction of starting activity from background due… |
CVE-2022-20413 | Medium | 5.5 | 2022-10-11 | In start of Threads.cpp, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information dis… |
CVE-2022-20412 | Medium | 6.7 | 2022-10-11 | In fdt_next_tag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System… |
CVE-2022-20410 | High | 7.5 | 2022-10-11 | In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information discl… |
CVE-2022-20409 | Medium | 6.7 | 2022-10-11 | In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with Syst… |
CVE-2022-20394 | Medium | 5.0 | 2022-10-11 | In getInputMethodWindowVisibleHeight of InputMethodManagerService.java, there is a possible way to determine when another app is showing an IME due to a missin… |
CVE-2022-20351 | Medium | 5.5 | 2022-10-11 | In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due to SQL injection. This could lead to local information disclo… |
CVE-2022-41083 | High | 7.8 | 2022-10-11 | Visual Studio Code Elevation of Privilege Vulnerability |
CVE-2022-41081 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-41043 | Low | 3.3 | 2022-10-11 | Microsoft Office Information Disclosure Vulnerability |
CVE-2022-41042 | High | 7.4 | 2022-10-11 | Visual Studio Code Information Disclosure Vulnerability |
CVE-2022-41038 | High | 8.8 | 2022-10-11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-41037 | High | 8.8 | 2022-10-11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-41036 | High | 8.8 | 2022-10-11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-41035 | Medium | 5.3 | 2022-10-11 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2022-41034 | High | 7.8 | 2022-10-11 | Visual Studio Code Remote Code Execution Vulnerability |
CVE-2022-41033 | High | 7.8 | 2022-10-11 | Windows COM+ Event System Service Elevation of Privilege Vulnerability |
CVE-2022-41032 | High | 7.8 | 2022-10-11 | NuGet Client Elevation of Privilege Vulnerability |
CVE-2022-41031 | High | 7.8 | 2022-10-11 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2022-40047 | Medium | 5.4 | 2022-10-11 | Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the page parameter at /flatpress/admin.php. |
CVE-2022-38053 | High | 8.8 | 2022-10-11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-38051 | High | 7.8 | 2022-10-11 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2022-38050 | High | 7.8 | 2022-10-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2022-38049 | High | 7.8 | 2022-10-11 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2022-38048 | High | 7.8 | 2022-10-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2022-38047 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-38046 | High | 7.5 | 2022-10-11 | Web Account Manager Information Disclosure Vulnerability |
CVE-2022-38045 | High | 8.8 | 2022-10-11 | Windows Server Service Elevation of Privilege Vulnerability |
CVE-2022-38044 | High | 7.8 | 2022-10-11 | Windows CD-ROM File System Driver Remote Code Execution Vulnerability |
CVE-2022-38043 | Medium | 5.5 | 2022-10-11 | Windows Security Support Provider Interface Information Disclosure Vulnerability |
CVE-2022-38042 | High | 7.1 | 2022-10-11 | Active Directory Domain Services Elevation of Privilege Vulnerability |
CVE-2022-38041 | High | 7.5 | 2022-10-11 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2022-38040 | High | 8.8 | 2022-10-11 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2022-38039 | High | 7.8 | 2022-10-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-38038 | High | 7.8 | 2022-10-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-38037 | High | 7.8 | 2022-10-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-38036 | High | 7.5 | 2022-10-11 | Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability |
CVE-2022-38034 | High | 8.8 | 2022-10-11 | Windows Workstation Service Elevation of Privilege Vulnerability |
CVE-2022-38033 | Medium | 6.5 | 2022-10-11 | Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability |
CVE-2022-38032 | Medium | 6.6 | 2022-10-11 | Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability |
CVE-2022-38031 | High | 8.8 | 2022-10-11 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2022-38030 | Medium | 4.3 | 2022-10-11 | Windows USB Serial Driver Information Disclosure Vulnerability |
CVE-2022-38029 | High | 7.0 | 2022-10-11 | Windows ALPC Elevation of Privilege Vulnerability |
CVE-2022-38028 | High | 7.8 | 2022-10-11 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-38027 | High | 7.0 | 2022-10-11 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2022-38026 | Medium | 5.5 | 2022-10-11 | Windows DHCP Client Information Disclosure Vulnerability |
CVE-2022-38025 | Medium | 5.5 | 2022-10-11 | Windows Distributed File System (DFS) Information Disclosure Vulnerability |
CVE-2022-38022 | Low | 3.3 | 2022-10-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-38021 | High | 7.0 | 2022-10-11 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
CVE-2022-38017 | Medium | 6.8 | 2022-10-11 | StorSimple 8000 Series Elevation of Privilege Vulnerability |
CVE-2022-38016 | High | 8.8 | 2022-10-11 | Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
CVE-2022-38003 | High | 7.8 | 2022-10-11 | Windows Resilient File System Elevation of Privilege |
CVE-2022-38001 | Medium | 6.5 | 2022-10-11 | Microsoft Office Spoofing Vulnerability |
CVE-2022-38000 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-37999 | High | 7.8 | 2022-10-11 | Windows Group Policy Preference Client Elevation of Privilege Vulnerability |
CVE-2022-37998 | High | 7.7 | 2022-10-11 | Windows Local Session Manager (LSM) Denial of Service Vulnerability |
CVE-2022-37997 | High | 7.8 | 2022-10-11 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2022-37996 | Medium | 5.5 | 2022-10-11 | Windows Kernel Memory Information Disclosure Vulnerability |
CVE-2022-37995 | High | 7.8 | 2022-10-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-37994 | High | 7.8 | 2022-10-11 | Windows Group Policy Preference Client Elevation of Privilege Vulnerability |
CVE-2022-37993 | High | 7.8 | 2022-10-11 | Windows Group Policy Preference Client Elevation of Privilege Vulnerability |
CVE-2022-37991 | High | 7.8 | 2022-10-11 | Windows Kernel Elevation of Privilege Vulnerability |