2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34476 | CRITICAL | 9.8 | 0.7% | Dec 22, 2022 | ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the parser accepting malformed... |
| CVE-2022-34475 | MEDIUM | 6.1 | 0.4% | Dec 22, 2022 | SVG <code><use></code> tags that referenced a same-origin document could have resulted in script execution if atta... |
| CVE-2022-34474 | MEDIUM | 6.1 | 0.4% | Dec 22, 2022 | Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if it received a redirect h... |
| CVE-2022-34473 | MEDIUM | 6.1 | 0.4% | Dec 22, 2022 | The HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use></code> tags; however i... |
| CVE-2022-34472 | MEDIUM | 4.3 | 0.6% | Dec 22, 2022 | If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, r... |
| CVE-2022-34471 | MEDIUM | 6.5 | 0.2% | Dec 22, 2022 | When downloading an update for an addon, the downloaded addon update's version was not verified to match the version sel... |
| CVE-2022-34470 | CRITICAL | 9.8 | 1.1% | Dec 22, 2022 | Session history navigations may have led to a use-after-free and potentially exploitable crash. This vulnerability affec... |
| CVE-2022-34469 | HIGH | 8.1 | 0.4% | Dec 22, 2022 | When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to b... |
| CVE-2022-34468 | HIGH | 8.8 | 0.9% | Dec 22, 2022 | An iframe that was not permitted to run scripts could do so if the user clicked on a <code>javascript:</code> link. This... |
| CVE-2022-31748 | CRITICAL | 9.8 | 0.7% | Dec 22, 2022 | Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported m... |
| CVE-2022-31747 | CRITICAL | 9.8 | 0.9% | Dec 22, 2022 | Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs presen... |
| CVE-2022-31746 | MEDIUM | 6.5 | 0.4% | Dec 22, 2022 | Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. ... |
| CVE-2022-31745 | MEDIUM | 4.3 | 0.3% | Dec 22, 2022 | If array shift operations are not used, the Garbage Collector may have become confused about valid objects. This vulnera... |
| CVE-2022-31744 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so by... |
| CVE-2022-31743 | MEDIUM | 6.5 | 0.4% | Dec 22, 2022 | Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. Th... |
| CVE-2022-31742 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | An attacker could have exploited a timing attack by sending a large number of allowCredential entries and detecting the ... |
| CVE-2022-31741 | HIGH | 8.8 | 0.7% | Dec 22, 2022 | A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further ... |
| CVE-2022-31740 | HIGH | 8.8 | 0.7% | Dec 22, 2022 | On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a... |
| CVE-2022-31739 | HIGH | 8.8 | 0.7% | Dec 22, 2022 | When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly bein... |
| CVE-2022-31738 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting... |
| CVE-2022-31737 | CRITICAL | 9.8 | 0.8% | Dec 22, 2022 | A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially ex... |
| CVE-2022-31736 | CRITICAL | 9.8 | 1.1% | Dec 22, 2022 | A malicious website could have learned the size of a cross-origin resource that supported Range requests. This vulnerabi... |
| CVE-2022-2505 | HIGH | 8.8 | 0.7% | Dec 22, 2022 | Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs s... |
| CVE-2022-2226 | MEDIUM | 6.5 | 0.4% | Dec 22, 2022 | An OpenPGP digital signature includes information about the date when the signature was created. When displaying an emai... |
| CVE-2022-2200 | HIGH | 8.8 | 23.9% | Dec 22, 2022 | If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScri... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now