2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-22742 | MEDIUM | 6.5 | 0.8% | Dec 22, 2022 | When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potenti... |
| CVE-2022-22741 | HIGH | 7.5 | 0.7% | Dec 22, 2022 | When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode. T... |
| CVE-2022-22740 | HIGH | 8.8 | 1.0% | Dec 22, 2022 | Certain network request objects were freed too early when releasing a network request handle. This could have lead to a ... |
| CVE-2022-22739 | MEDIUM | 6.5 | 0.7% | Dec 22, 2022 | Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol. This ... |
| CVE-2022-22738 | HIGH | 8.8 | 1.0% | Dec 22, 2022 | Applying a CSS filter effect could have accessed out of bounds memory. This could have lead to a heap-buffer-overflow ca... |
| CVE-2022-22737 | HIGH | 7.5 | 0.8% | Dec 22, 2022 | Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could ha... |
| CVE-2022-22736 | HIGH | 7 | 0.2% | Dec 22, 2022 | If Firefox was installed to a world-writable directory, a local privilege escalation could occur when Firefox searched t... |
| CVE-2022-22461 | HIGH | 7.5 | 0.4% | Dec 22, 2022 | IBM Security Verify Governance, Identity Manager 10.0.1 uses weaker than expected cryptographic algorithms that could a... |
| CVE-2022-1887 | CRITICAL | 9.8 | 0.6% | Dec 22, 2022 | The search term could have been specified externally to trigger SQL injection. This vulnerability affects Firefox for iO... |
| CVE-2022-1834 | MEDIUM | 6.5 | 0.4% | Dec 22, 2022 | When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple... |
| CVE-2022-1802 | HIGH | 8.8 | 26.7% | Dec 22, 2022 | If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have... |
| CVE-2022-1529 | HIGH | 8.8 | 17.1% | Dec 22, 2022 | An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScri... |
| CVE-2022-1520 | MEDIUM | 4.3 | 0.3% | Dec 22, 2022 | When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both,... |
| CVE-2022-1197 | MEDIUM | 5.4 | 0.4% | Dec 22, 2022 | When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the exis... |
| CVE-2022-1196 | MEDIUM | 6.5 | 0.7% | Dec 22, 2022 | After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and pote... |
| CVE-2022-1097 | MEDIUM | 6.5 | 0.9% | Dec 22, 2022 | <code>NSSToken</code> objects were referenced via direct points, and could have been accessed in an unsafe way on differ... |
| CVE-2022-0843 | HIGH | 8.8 | 0.6% | Dec 22, 2022 | Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety bugs present in Firefox 97... |
| CVE-2022-0566 | HIGH | 8.8 | 0.7% | Dec 22, 2022 | It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write o... |
| CVE-2022-0517 | HIGH | 7.8 | 0.2% | Dec 22, 2022 | Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileg... |
| CVE-2022-0511 | HIGH | 8.8 | 0.5% | Dec 22, 2022 | Mozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan Herrera, Lars T Hansen, ... |
| CVE-2022-46170 | CRITICAL | 9.8 | 0.8% | Dec 22, 2022 | CodeIgniter is a PHP full-stack web framework. When an application uses (1) multiple session cookies (e.g., one for user... |
| CVE-2022-23556 | HIGH | 7.5 | 0.4% | Dec 22, 2022 | CodeIgniter is a PHP full-stack web framework. This vulnerability may allow attackers to spoof their IP address when the... |
| CVE-2022-23540 | HIGH | 7.6 | 0.5% | Dec 22, 2022 | In versions `<=8.5.1` of `jsonwebtoken` library, lack of algorithm definition in the `jwt.verify()` function can lead to... |
| CVE-2022-47926 | CRITICAL | 9.8 | 0.8% | Dec 22, 2022 | AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php |
| CVE-2022-46102 | CRITICAL | 9.8 | 0.7% | Dec 22, 2022 | AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now