CVE-2022-46342

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X se

• CWE-416
• CWE-416

• https://access.redhat.com/security/cve/CVE-2022-46342Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2151757Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/Mailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202305-30
• https://www.debian.org/security/2022/dsa-5304Third Party Advisory
• https://access.redhat.com/security/cve/CVE-2022-46342Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2151757Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXDF2O5PPLE3SVAJJYUOSAD5QZ4TWQ2G/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z67QC4C3I2FI2WRFIUPEHKC36J362MLA/Mailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202305-30
• https://www.debian.org/security/2022/dsa-5304Third Party Advisory

Published

Dec 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-46336Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-46337A cleverly devised username might bypass LDAP authentication…9.8
• CVE-2022-46338g810-led 0.4.2, a LED configuration tool for Logitech Gx10 k…6.5
• CVE-2022-4634All versions prior to Delta Electronic’s CNCSoft version 1.0…7.8
• CVE-2022-46340A vulnerability was found in X.Org. This security flaw occur…8.8
• CVE-2022-46341A vulnerability was found in X.Org. This security flaw occur…8.8
• CVE-2022-46343A vulnerability was found in X.Org. This security flaw occur…8.8
• CVE-2022-46344A vulnerability was found in X.Org. This security flaw occur…8.8
• CVE-2022-46345A vulnerability has been identified in Parasolid V33.1 (All …7.8
• CVE-2022-46346A vulnerability has been identified in Parasolid V33.1 (All …7.8
• CVE-2022-46347A vulnerability has been identified in Parasolid V33.1 (All …7.8
• CVE-2022-46348A vulnerability has been identified in Parasolid V33.1 (All …7.8