2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-33224 | HIGH | 7.8 | 0.1% | Jun 6, 2023 | Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries. |
| CVE-2022-22076 | MEDIUM | 5.5 | 0.1% | Jun 6, 2023 | information disclosure due to cryptographic issue in Core during RPMB read request. |
| CVE-2022-22060 | HIGH | 7.5 | 0.4% | Jun 6, 2023 | Assertion occurs while processing Reconfiguration message due to improper validation |
| CVE-2022-48448 | MEDIUM | 5.5 | 0.1% | Jun 6, 2023 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no a... |
| CVE-2022-48447 | MEDIUM | 5.5 | 0.1% | Jun 6, 2023 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no a... |
| CVE-2022-48446 | MEDIUM | 5.5 | 0.1% | Jun 6, 2023 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no a... |
| CVE-2022-48445 | MEDIUM | 5.5 | 0.1% | Jun 6, 2023 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no a... |
| CVE-2022-48444 | MEDIUM | 5.5 | 0.1% | Jun 6, 2023 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no a... |
| CVE-2022-48443 | MEDIUM | 5.5 | 0.1% | Jun 6, 2023 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no a... |
| CVE-2022-48442 | MEDIUM | 5.5 | 0.1% | Jun 6, 2023 | In dialer service, there is a possible missing permission check. This could lead to local denial of service with no addi... |
| CVE-2022-48441 | MEDIUM | 5.5 | 0.1% | Jun 6, 2023 | In dialer service, there is a possible missing permission check. This could lead to local denial of service with no addi... |
| CVE-2022-48440 | MEDIUM | 5.5 | 0.1% | Jun 6, 2023 | In dialer service, there is a possible missing permission check. This could lead to local denial of service with no addi... |
| CVE-2022-48439 | MEDIUM | 4.4 | 0.1% | Jun 6, 2023 | In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia... |
| CVE-2022-48438 | MEDIUM | 4.4 | 0.1% | Jun 6, 2023 | In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia... |
| CVE-2022-48392 | HIGH | 7.8 | 0.1% | Jun 6, 2023 | In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with n... |
| CVE-2022-48391 | MEDIUM | 5.5 | 0.1% | Jun 6, 2023 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no a... |
| CVE-2022-48390 | HIGH | 7.8 | 0.1% | Jun 6, 2023 | In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege wit... |
| CVE-2022-48188 | HIGH | 7.8 | 0.2% | Jun 5, 2023 | A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could al... |
| CVE-2022-48181 | HIGH | 7.8 | 0.2% | Jun 5, 2023 | An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker... |
| CVE-2022-4569 | HIGH | 7.8 | 0.2% | Jun 5, 2023 | A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow... |
| CVE-2022-4946 | MEDIUM | 5.4 | 0.4% | Jun 5, 2023 | The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its shortcode... |
| CVE-2022-24695 | MEDIUM | 4.3 | 0.4% | Jun 2, 2023 | Bluetooth Classic in Bluetooth Core Specification through 5.3 does not properly conceal device information for Bluetooth... |
| CVE-2022-47617 | HIGH | 7.2 | 0.5% | Jun 2, 2023 | Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an ad... |
| CVE-2022-47616 | HIGH | 7.2 | 1.3% | Jun 2, 2023 | Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker a... |
| CVE-2022-46308 | HIGH | 8.8 | 0.7% | Jun 2, 2023 | SGUDA U-Lock central lock control service’s user management function has incorrect authorization. A remote attacker with... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now