2022 CVEs (page 158)
Page 158 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-20309 | Low | 3.3 | 2022-08-12 | In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. T… |
CVE-2022-20308 | High | 7.5 | 2022-08-12 | In hostapd, there is a possible insecure configuration due to an insecure default value. This could lead to remote denial of service of the wifi hotspot with n… |
CVE-2022-20307 | Low | 3.3 | 2022-08-12 | In AlarmManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2022-20306 | Medium | 6.7 | 2022-08-12 | In Camera Provider HAL, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution p… |
CVE-2022-20305 | Low | 3.3 | 2022-08-12 | In ContentService, there is a possible disclosure of available account types due to a missing permission check. This could lead to local information disclosure… |
CVE-2022-20304 | Medium | 5.5 | 2022-08-12 | In Content, there is a possible way to determinate the user's account due to side channel information disclosure. This could lead to local information disclosu… |
CVE-2022-20303 | Medium | 5.5 | 2022-08-12 | In ContentService, there is a possible way to determine if an account is on the device without GET_ACCOUNTS permission due to a missing permission check. This… |
CVE-2022-20302 | High | 7.6 | 2022-08-12 | In Settings, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to local escalation of privilege if the attac… |
CVE-2022-20301 | Medium | 5.5 | 2022-08-12 | In Content, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclos… |
CVE-2022-20300 | Medium | 5.5 | 2022-08-12 | In Content, there is a possible way to check if the given account exists on the device due to a missing permission check. This could lead to local information… |
CVE-2022-20299 | Medium | 5.5 | 2022-08-12 | In ContentService, there is a possible way to check if the given account exists on the device due to a missing permission check. This could lead to local infor… |
CVE-2022-20298 | Medium | 5.5 | 2022-08-12 | In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information… |
CVE-2022-20297 | High | 7.8 | 2022-08-12 | In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege wit… |
CVE-2022-20296 | Medium | 5.5 | 2022-08-12 | In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information… |
CVE-2022-20295 | Medium | 5.5 | 2022-08-12 | In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information… |
CVE-2022-20294 | Medium | 5.5 | 2022-08-12 | In Content, there is a possible way to learn about an account present on the device due to a missing permission check. This could lead to local information dis… |
CVE-2022-20293 | Medium | 5.5 | 2022-08-12 | In LauncherApps, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This… |
CVE-2022-20292 | High | 7.8 | 2022-08-12 | In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege wit… |
CVE-2022-20291 | Medium | 5.5 | 2022-08-12 | In AppOpsService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This… |
CVE-2022-20290 | Medium | 5.5 | 2022-08-12 | In Midi, there is a possible way to learn about private midi devices due to a permissions bypass. This could lead to local escalation of privilege with no addi… |
CVE-2022-20289 | Medium | 5.5 | 2022-08-12 | In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. T… |
CVE-2022-20288 | Medium | 5.5 | 2022-08-12 | In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclo… |
CVE-2022-20287 | Medium | 5.5 | 2022-08-12 | In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclo… |
CVE-2022-20286 | High | 7.8 | 2022-08-12 | In Connectivity, there is a possible bypass the restriction of starting activity from background due to a logic error in the code. This could lead to local esc… |
CVE-2022-20285 | Medium | 5.5 | 2022-08-12 | In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. Thi… |
CVE-2022-20284 | Medium | 5.5 | 2022-08-12 | In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of phone accounts w… |
CVE-2022-20283 | High | 8.8 | 2022-08-12 | In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution over Bluetooth with no additional ex… |
CVE-2022-20282 | High | 7.8 | 2022-08-12 | In AppWidget, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of privil… |
CVE-2022-20281 | High | 7.8 | 2022-08-12 | In Core, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of privilege w… |
CVE-2022-20280 | Low | 3.3 | 2022-08-12 | In MMSProvider, there is a possible read of protected data due to improper input validationSQL injection. This could lead to local information disclosure of sm… |
CVE-2022-20279 | Medium | 5.5 | 2022-08-12 | In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2022-20278 | Medium | 5.5 | 2022-08-12 | In Accounts, there is a possible way to write sensitive information to the system log due to insufficient log filtering. This could lead to local information d… |
CVE-2022-20277 | Medium | 5.5 | 2022-08-12 | In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2022-20276 | Medium | 5.5 | 2022-08-12 | In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2022-20275 | Medium | 5.5 | 2022-08-12 | In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2022-20274 | High | 7.8 | 2022-08-12 | In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of screen timeout with User execution privile… |
CVE-2022-20273 | Medium | 6.5 | 2022-08-12 | In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional executi… |
CVE-2022-20272 | Medium | 5.5 | 2022-08-12 | In PermissionController, there is a possible misunderstanding about the default SMS application's permission set due to misleading text. This could lead to loc… |
CVE-2022-20271 | High | 7.8 | 2022-08-12 | In PermissionController, there is a possible way to grant some permissions without user consent due to misleading or insufficient UI. This could lead to local… |
CVE-2022-20270 | Medium | 5.5 | 2022-08-12 | In Content, there is a possible way to learn gmail account name on the device due to a permissions bypass. This could lead to local information disclosure with… |
CVE-2022-20269 | Medium | 6.8 | 2022-08-12 | In Bluetooth, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2022-20268 | High | 7.8 | 2022-08-12 | In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a permissions bypass. This could lead to lo… |
CVE-2022-20267 | Low | 3.3 | 2022-08-12 | In bluetooth, there is a possible way to enable or disable bluetooth connection without user consent due to a missing permission check. This could lead to loca… |
CVE-2022-20266 | Medium | 5.0 | 2022-08-12 | In Companion, there is a possible way to keep a service running with elevated importance without showing foreground service notification due to improper input… |
CVE-2022-20265 | Medium | 4.6 | 2022-08-12 | In Settings, there is a possible way to bypass factory reset permissions due to a permissions bypass. This could lead to local escalation of privilege with phy… |
CVE-2022-20263 | Medium | 5.5 | 2022-08-12 | In ActivityManager, there is a way to read process state for other users due to a missing permission check. This could lead to local information disclosure of… |
CVE-2022-20262 | Low | 3.3 | 2022-08-12 | In ActivityManager, there is a possible way to check another process's capabilities due to a missing permission check. This could lead to local information dis… |
CVE-2022-20261 | Low | 2.3 | 2022-08-12 | In LocationManager, there is a possible way to get location information due to a missing permission check. This could lead to local information disclosure with… |
CVE-2022-20260 | Medium | 5.5 | 2022-08-12 | In the Phone app, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial of service in the Phone app with User e… |
CVE-2022-20259 | Medium | 5.5 | 2022-08-12 | In Telephony, there is a possible leak of ICCID and EID due to a missing permission check. This could lead to local information disclosure with no additional e… |
CVE-2022-20258 | High | 7.8 | 2022-08-12 | In Bluetooth, there is a possible way to bypass compiler exploit mitigations due to a configuration error. This could lead to local escalation of privilege wit… |
CVE-2022-20257 | Low | 3.3 | 2022-08-12 | In Bluetooth, there is a possible way to pair a display only device without PIN confirmation due to a logic error in the code. This could lead to local escalat… |
CVE-2022-20256 | Medium | 6.4 | 2022-08-12 | In the Audio HAL, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-20255 | Medium | 4.4 | 2022-08-12 | In SettingsProvider, there is a possible way to read or change the default ringtone due to a missing permission check. This could lead to local escalation of p… |
CVE-2022-20254 | High | 8.8 | 2022-08-12 | In Wi-Fi, there is a permissions bypass. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. U… |
CVE-2022-20253 | Medium | 6.5 | 2022-08-12 | In Bluetooth, there is a possible cleanup failure due to an uncaught exception. This could lead to remote denial of service in Bluetooth with no additional exe… |
CVE-2022-2503 | Medium | 6.9 | 2022-08-12 | Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root f… |
CVE-2022-2390 | Medium | 6.1 | 2022-08-12 | Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed to the Notification service. As Google… |
CVE-2022-38180 | Medium | 5.3 | 2022-08-12 | In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases |
CVE-2022-38179 | Medium | 4.7 | 2022-08-12 | JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack |
CVE-2022-2779 | Medium | 6.3 | 2022-08-12 | A vulnerability classified as critical was found in SourceCodester Gas Agency Management System. Affected by this vulnerability is an unknown functionality of… |
CVE-2022-35678 | Medium | 5.5 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds read vulne… |
CVE-2022-35677 | High | 7.8 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could res… |
CVE-2022-35676 | High | 7.8 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could res… |
CVE-2022-35675 | High | 7.8 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Use After Free vulnerability that could result in arbit… |
CVE-2022-35674 | High | 7.8 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafte… |
CVE-2022-35673 | High | 7.8 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafte… |
CVE-2022-35671 | Medium | 5.5 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds read vulne… |
CVE-2022-35670 | Medium | 5.5 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-35668 | Medium | 5.5 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an Improper Input Validatio… |
CVE-2022-35667 | High | 7.8 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds write vuln… |
CVE-2022-35666 | High | 7.8 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an Improper Input Validatio… |
CVE-2022-35665 | High | 7.8 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-34264 | Medium | 5.5 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to di… |
CVE-2022-34263 | High | 7.8 | 2022-08-11 | Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code exe… |
CVE-2022-34262 | Medium | 5.5 | 2022-08-11 | Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2022-34261 | Medium | 5.5 | 2022-08-11 | Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2022-34260 | High | 7.8 | 2022-08-11 | Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-34235 | High | 7.8 | 2022-08-11 | Adobe Premiere Elements version 2020v20 (and earlier) is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker… |
CVE-2022-28755 | Critical | 9.6 | 2022-08-11 | The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.11.0 are susceptible to a URL parsing vulnerability. If a malicious… |
CVE-2022-28754 | High | 7.1 | 2022-08-11 | Zoom On-Premise Meeting Connector MMR before version 4.8.129.20220714 contains an improper access control vulnerability. As a result, a malicious actor can joi… |
CVE-2022-28753 | High | 7.1 | 2022-08-11 | Zoom On-Premise Meeting Connector MMR before version 4.8.129.20220714 contains an improper access control vulnerability. As a result, a malicious actor can joi… |
CVE-2022-28750 | High | 7.5 | 2022-08-11 | Zoom On-Premise Meeting Connector Zone Controller (ZC) before version 4.8.20220419.112 fails to properly parse STUN error codes, which can result in memory cor… |
CVE-2022-20408 | High | 7.5 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-204782372References: N/A |
CVE-2022-20407 | High | 7.5 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-210916981References: N/A |
CVE-2022-20406 | High | 7.5 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-184676385References: N/A |
CVE-2022-20405 | Critical | 9.8 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-216363416References: N/A |
CVE-2022-20404 | High | 7.5 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-205714161References: N/A |
CVE-2022-20403 | Critical | 9.8 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-207975764References: N/A |
CVE-2022-20402 | Critical | 9.8 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A |
CVE-2022-20401 | High | 7.5 | 2022-08-11 | In SAEMM_RetrievEPLMNList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informa… |
CVE-2022-20400 | Critical | 9.8 | 2022-08-11 | In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional… |
CVE-2022-20384 | Critical | 9.8 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-211727306References: N/A |
CVE-2022-20383 | High | 7.8 | 2022-08-11 | In AllocateInternalBuffers of g3aa_buffer_allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation… |
CVE-2022-20382 | Medium | 6.7 | 2022-08-11 | In (TBD) of (TBD), there is a possible out of bounds write due to kernel stack overflow. This could lead to local escalation of privilege with System execution… |
CVE-2022-20381 | Critical | 9.8 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/A |
CVE-2022-20380 | High | 7.5 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-212625740References: N/A |
CVE-2022-20379 | Medium | 6.7 | 2022-08-11 | In lwis_buffer_alloc of lwis_buffer.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege w… |
CVE-2022-20378 | Critical | 9.8 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/A |
CVE-2022-20377 | Medium | 6.7 | 2022-08-11 | In TBD of keymaster_ipc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of… |