2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3032 | MEDIUM | 6.5 | 0.7% | Dec 22, 2022 | When receiving an HTML email that contained an <code>iframe</code> element, which used a <code>srcdoc</code> attribute t... |
| CVE-2022-38478 | HIGH | 8.8 | 0.9% | Dec 22, 2022 | Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR ... |
| CVE-2022-38477 | HIGH | 8.8 | 0.9% | Dec 22, 2022 | Mozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103 and Firef... |
| CVE-2022-38476 | HIGH | 7.5 | 0.8% | Dec 22, 2022 | A data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use-after-free vulnerabilit... |
| CVE-2022-38475 | MEDIUM | 6.5 | 0.4% | Dec 22, 2022 | An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was ze... |
| CVE-2022-38474 | MEDIUM | 4.3 | 0.4% | Dec 22, 2022 | A website that had permission to access the microphone could record audio without the audio notification being shown. Th... |
| CVE-2022-38473 | HIGH | 8.8 | 0.7% | Dec 22, 2022 | A cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions (such as microphone or ... |
| CVE-2022-38472 | MEDIUM | 6.5 | 0.4% | Dec 22, 2022 | An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was... |
| CVE-2022-36320 | CRITICAL | 9.8 | 0.7% | Dec 22, 2022 | Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs s... |
| CVE-2022-36319 | HIGH | 7.5 | 0.7% | Dec 22, 2022 | When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates tha... |
| CVE-2022-36318 | MEDIUM | 5.3 | 0.5% | Dec 22, 2022 | When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability... |
| CVE-2022-36317 | MEDIUM | 6.5 | 0.5% | Dec 22, 2022 | When visiting a website with an overly long URL, the user interface would start to hang. Due to session restore, this co... |
| CVE-2022-36316 | MEDIUM | 6.1 | 0.3% | Dec 22, 2022 | When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus le... |
| CVE-2022-36315 | MEDIUM | 4.3 | 0.2% | Dec 22, 2022 | When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of prev... |
| CVE-2022-36314 | MEDIUM | 5.5 | 0.2% | Dec 22, 2022 | When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to une... |
| CVE-2022-35646 | MEDIUM | 5.3 | 0.4% | Dec 22, 2022 | IBM Security Verify Governance, Identity Manager 10.0.1 software component could allow an authenticated user to modify ... |
| CVE-2022-34485 | CRITICAL | 9.8 | 0.7% | Dec 22, 2022 | Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in Firef... |
| CVE-2022-34484 | HIGH | 8.8 | 1.0% | Dec 22, 2022 | The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of these bugs showed evid... |
| CVE-2022-34483 | HIGH | 8.8 | 0.7% | Dec 22, 2022 | An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulti... |
| CVE-2022-34482 | HIGH | 8.8 | 0.7% | Dec 22, 2022 | An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulti... |
| CVE-2022-34481 | HIGH | 8.8 | 0.8% | Dec 22, 2022 | In the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have occurred when the number... |
| CVE-2022-34480 | HIGH | 8.8 | 0.5% | Dec 22, 2022 | Within the <code>lg_init()</code> function, if several allocations succeed but then one fails, an uninitialized pointer ... |
| CVE-2022-34479 | MEDIUM | 6.5 | 0.7% | Dec 22, 2022 | A malicious website that could create a popup could have resized the popup to overlay the address bar with its own conte... |
| CVE-2022-34478 | MEDIUM | 6.5 | 0.8% | Dec 22, 2022 | The <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver content to Microsoft applica... |
| CVE-2022-34477 | HIGH | 7.5 | 0.6% | Dec 22, 2022 | The MediaError message property should be consistent to avoid leaking information about cross-origin resources; however ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now