2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3266 | MEDIUM | 5.5 | 0.3% | Dec 22, 2022 | An out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash. This vulnerab... |
| CVE-2022-3034 | MEDIUM | 4.3 | 0.5% | Dec 22, 2022 | When receiving an HTML email that specified to load an <code>iframe</code> element from a remote location, a request to ... |
| CVE-2022-3032 | MEDIUM | 6.5 | 0.7% | Dec 22, 2022 | When receiving an HTML email that contained an <code>iframe</code> element, which used a <code>srcdoc</code> attribute t... |
| CVE-2022-38475 | MEDIUM | 6.5 | 0.4% | Dec 22, 2022 | An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was ze... |
| CVE-2022-38474 | MEDIUM | 4.3 | 0.4% | Dec 22, 2022 | A website that had permission to access the microphone could record audio without the audio notification being shown. Th... |
| CVE-2022-38472 | MEDIUM | 6.5 | 0.4% | Dec 22, 2022 | An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was... |
| CVE-2022-36318 | MEDIUM | 5.3 | 0.5% | Dec 22, 2022 | When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability... |
| CVE-2022-36317 | MEDIUM | 6.5 | 0.5% | Dec 22, 2022 | When visiting a website with an overly long URL, the user interface would start to hang. Due to session restore, this co... |
| CVE-2022-36316 | MEDIUM | 6.1 | 0.3% | Dec 22, 2022 | When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus le... |
| CVE-2022-36315 | MEDIUM | 4.3 | 0.2% | Dec 22, 2022 | When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of prev... |
| CVE-2022-36314 | MEDIUM | 5.5 | 0.2% | Dec 22, 2022 | When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to une... |
| CVE-2022-35646 | MEDIUM | 5.3 | 0.4% | Dec 22, 2022 | IBM Security Verify Governance, Identity Manager 10.0.1 software component could allow an authenticated user to modify ... |
| CVE-2022-34479 | MEDIUM | 6.5 | 0.7% | Dec 22, 2022 | A malicious website that could create a popup could have resized the popup to overlay the address bar with its own conte... |
| CVE-2022-34478 | MEDIUM | 6.5 | 0.8% | Dec 22, 2022 | The <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver content to Microsoft applica... |
| CVE-2022-34475 | MEDIUM | 6.1 | 0.4% | Dec 22, 2022 | SVG <code><use></code> tags that referenced a same-origin document could have resulted in script execution if atta... |
| CVE-2022-34474 | MEDIUM | 6.1 | 0.4% | Dec 22, 2022 | Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if it received a redirect h... |
| CVE-2022-34473 | MEDIUM | 6.1 | 0.4% | Dec 22, 2022 | The HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use></code> tags; however i... |
| CVE-2022-34472 | MEDIUM | 4.3 | 0.6% | Dec 22, 2022 | If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, r... |
| CVE-2022-34471 | MEDIUM | 6.5 | 0.2% | Dec 22, 2022 | When downloading an update for an addon, the downloaded addon update's version was not verified to match the version sel... |
| CVE-2022-31746 | MEDIUM | 6.5 | 0.4% | Dec 22, 2022 | Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. ... |
| CVE-2022-31745 | MEDIUM | 4.3 | 0.3% | Dec 22, 2022 | If array shift operations are not used, the Garbage Collector may have become confused about valid objects. This vulnera... |
| CVE-2022-31744 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so by... |
| CVE-2022-31743 | MEDIUM | 6.5 | 0.4% | Dec 22, 2022 | Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. Th... |
| CVE-2022-31742 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | An attacker could have exploited a timing attack by sending a large number of allowCredential entries and detecting the ... |
| CVE-2022-31738 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now