2022 CVEs (page 213)
Page 213 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-29142 | High | 7.0 | 2022-05-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-29141 | High | 8.8 | 2022-05-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-29140 | Medium | 5.5 | 2022-05-10 | Windows Print Spooler Information Disclosure Vulnerability |
CVE-2022-29139 | High | 8.8 | 2022-05-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-29138 | High | 7.0 | 2022-05-10 | Windows Clustered Shared Volume Elevation of Privilege Vulnerability |
CVE-2022-29137 | High | 8.8 | 2022-05-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-29135 | High | 7.0 | 2022-05-10 | Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability |
CVE-2022-29134 | Medium | 6.5 | 2022-05-10 | Windows Clustered Shared Volume Information Disclosure Vulnerability |
CVE-2022-29133 | High | 8.8 | 2022-05-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-29132 | High | 7.8 | 2022-05-10 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-29131 | High | 8.8 | 2022-05-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-29130 | Critical | 9.8 | 2022-05-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-29129 | High | 8.8 | 2022-05-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-29128 | High | 8.8 | 2022-05-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-29127 | Medium | 4.2 | 2022-05-10 | BitLocker Security Feature Bypass Vulnerability |
CVE-2022-29126 | High | 7.0 | 2022-05-10 | Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability |
CVE-2022-29125 | High | 7.0 | 2022-05-10 | Windows Push Notifications Apps Elevation of Privilege Vulnerability |
CVE-2022-29123 | Medium | 6.5 | 2022-05-10 | Windows Clustered Shared Volume Information Disclosure Vulnerability |
CVE-2022-29122 | Medium | 6.5 | 2022-05-10 | Windows Clustered Shared Volume Information Disclosure Vulnerability |
CVE-2022-29121 | Medium | 6.5 | 2022-05-10 | Windows WLAN AutoConfig Service Denial of Service Vulnerability |
CVE-2022-29120 | Medium | 6.5 | 2022-05-10 | Windows Clustered Shared Volume Information Disclosure Vulnerability |
CVE-2022-29117 | High | 7.5 | 2022-05-10 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2022-29116 | Medium | 4.7 | 2022-05-10 | Windows Kernel Information Disclosure Vulnerability |
CVE-2022-29115 | High | 7.8 | 2022-05-10 | Windows Fax Service Remote Code Execution Vulnerability |
CVE-2022-29114 | Medium | 5.5 | 2022-05-10 | Windows Print Spooler Information Disclosure Vulnerability |
CVE-2022-29113 | High | 7.8 | 2022-05-10 | Windows Digital Media Receiver Elevation of Privilege Vulnerability |
CVE-2022-29112 | Medium | 6.5 | 2022-05-10 | Windows Graphics Component Information Disclosure Vulnerability |
CVE-2022-29110 | High | 7.8 | 2022-05-10 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2022-29109 | High | 7.8 | 2022-05-10 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2022-29108 | High | 8.8 | 2022-05-10 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-29107 | Medium | 5.5 | 2022-05-10 | Microsoft Office Security Feature Bypass Vulnerability |
CVE-2022-29106 | High | 7.0 | 2022-05-10 | Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability |
CVE-2022-29105 | High | 7.8 | 2022-05-10 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
CVE-2022-29104 | High | 7.8 | 2022-05-10 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-29103 | High | 7.8 | 2022-05-10 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
CVE-2022-29102 | Medium | 5.5 | 2022-05-10 | Windows Failover Cluster Information Disclosure Vulnerability |
CVE-2022-28601 | Medium | 6.5 | 2022-05-10 | A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number us… |
CVE-2022-26940 | Medium | 6.5 | 2022-05-10 | Remote Desktop Protocol Client Information Disclosure Vulnerability |
CVE-2022-26939 | High | 7.0 | 2022-05-10 | Storage Spaces Direct Elevation of Privilege Vulnerability |
CVE-2022-26938 | High | 7.0 | 2022-05-10 | Storage Spaces Direct Elevation of Privilege Vulnerability |
CVE-2022-26937 | Critical | 9.8 | 2022-05-10 | Windows Network File System Remote Code Execution Vulnerability |
CVE-2022-26936 | Medium | 6.5 | 2022-05-10 | Windows Server Service Information Disclosure Vulnerability |
CVE-2022-26935 | Medium | 6.5 | 2022-05-10 | Windows WLAN AutoConfig Service Information Disclosure Vulnerability |
CVE-2022-26934 | Medium | 6.5 | 2022-05-10 | Windows Graphics Component Information Disclosure Vulnerability |
CVE-2022-26933 | Medium | 5.5 | 2022-05-10 | Windows NTFS Information Disclosure Vulnerability |
CVE-2022-26932 | High | 8.2 | 2022-05-10 | Storage Spaces Direct Elevation of Privilege Vulnerability |
CVE-2022-26931 | High | 7.5 | 2022-05-10 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2022-26930 | Medium | 5.5 | 2022-05-10 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2022-26927 | High | 8.8 | 2022-05-10 | Windows Graphics Component Remote Code Execution Vulnerability |
CVE-2022-26926 | High | 7.8 | 2022-05-10 | Windows Address Book Remote Code Execution Vulnerability |
CVE-2022-26925 | High | 8.1 | 2022-05-10 | Windows LSA Spoofing Vulnerability |
CVE-2022-26923 | High | 8.8 | 2022-05-10 | Active Directory Domain Services Elevation of Privilege Vulnerability |
CVE-2022-26913 | High | 7.4 | 2022-05-10 | Windows Authentication Information Disclosure Vulnerability |
CVE-2022-24466 | Medium | 4.1 | 2022-05-10 | Windows Hyper-V Security Feature Bypass Vulnerability |
CVE-2022-23279 | High | 7.0 | 2022-05-10 | Windows ALPC Elevation of Privilege Vulnerability |
CVE-2022-23270 | High | 8.1 | 2022-05-10 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-23267 | High | 7.5 | 2022-05-10 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2022-22713 | Medium | 5.6 | 2022-05-10 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2022-22019 | High | 8.8 | 2022-05-10 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2022-22017 | High | 8.8 | 2022-05-10 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2022-22016 | High | 7.0 | 2022-05-10 | Windows PlayToManager Elevation of Privilege Vulnerability |
CVE-2022-22015 | Medium | 6.5 | 2022-05-10 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
CVE-2022-22014 | High | 8.8 | 2022-05-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-22013 | High | 8.8 | 2022-05-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-22012 | Critical | 9.8 | 2022-05-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-22011 | Medium | 5.5 | 2022-05-10 | Windows Graphics Component Information Disclosure Vulnerability |
CVE-2022-21978 | High | 8.2 | 2022-05-10 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2022-21972 | High | 8.1 | 2022-05-10 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-20121 | Medium | 5.5 | 2022-05-10 | In getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing permission check. This could lead to local information disclosur… |
CVE-2022-20120 | Critical | 9.8 | 2022-05-10 | Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/A |
CVE-2022-20119 | Medium | 5.5 | 2022-05-10 | In private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to uninitialized data. This could lead to local information disclo… |
CVE-2022-20118 | High | 7.0 | 2022-05-10 | In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with… |
CVE-2022-20117 | Medium | 5.5 | 2022-05-10 | In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information discl… |
CVE-2022-1431 | Medium | 4.3 | 2022-05-10 | An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions st… |
CVE-2022-1417 | Medium | 4.3 | 2022-05-10 | Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting from 14.9 before 14.9.4, and all version… |
CVE-2022-0866 | Medium | 5.3 | 2022-05-10 | This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an EJB that is configured with a RunAs pri… |
CVE-2022-30278 | Medium | 6.1 | 2022-05-10 | A vulnerability in Black Duck Hub’s embedded MadCap Flare documentation files could allow an unauthenticated remote attacker to conduct a cross-site scripting… |
CVE-2022-29399 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the url parameter in the function FUN_00415bf0. |
CVE-2022-29398 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the File parameter in the function FUN_0041309c. |
CVE-2022-29397 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004196c8. |
CVE-2022-29396 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418f10. |
CVE-2022-29395 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the apcliKey parameter in the function FUN_0041bac4. |
CVE-2022-29394 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN_0041b448. |
CVE-2022-29393 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004192cc. |
CVE-2022-29392 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418c24. |
CVE-2022-29391 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004200c8. |
CVE-2022-27167 | High | 7.1 | 2022-05-10 | Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbi… |
CVE-2022-20116 | High | 7.8 | 2022-05-10 | In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead to local escalation… |
CVE-2022-20115 | Medium | 5.5 | 2022-05-10 | In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information without location permission due to a missi… |
CVE-2022-20114 | High | 7.8 | 2022-05-10 | In placeCall of TelecomManager.java, there is a possible way for an application to keep itself running with foreground service importance due to a permissions… |
CVE-2022-20113 | High | 7.8 | 2022-05-10 | In mPreference of DefaultUsbConfigurationPreferenceController.java, there is a possible way to enable file transfer mode due to a logic error in the code. This… |
CVE-2022-20112 | Medium | 5.5 | 2022-05-10 | In getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a guest user to change private DNS settings due to a permissions b… |
CVE-2022-20011 | Medium | 5.5 | 2022-05-10 | In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to missing check. This could lead to local i… |
CVE-2022-20010 | Medium | 6.5 | 2022-05-10 | In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclos… |
CVE-2022-20009 | Medium | 6.8 | 2022-05-10 | In various functions of the USB gadget subsystem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of… |
CVE-2022-20008 | Medium | 4.6 | 2022-05-10 | In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information disclosur… |
CVE-2022-20007 | High | 7.0 | 2022-05-10 | In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the foregroun… |
CVE-2022-20006 | High | 7.0 | 2022-05-10 | In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a race condi… |
CVE-2022-20005 | High | 7.8 | 2022-05-10 | In validateApkInstallLocked of PackageInstallerSession.java, there is a way to force a mismatch between running code and a parsed APK . This could lead to loca… |
CVE-2022-20004 | High | 7.8 | 2022-05-10 | In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input validation. This could lead to local escalati… |