2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-20477 | HIGH | 7.8 | 0.1% | Dec 13, 2022 | In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notificat... |
| CVE-2022-20476 | MEDIUM | 5.5 | 0.2% | Dec 13, 2022 | In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due ... |
| CVE-2022-20475 | HIGH | 7.8 | 0.1% | Dec 13, 2022 | In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" d... |
| CVE-2022-20474 | HIGH | 7.8 | 0.2% | Dec 13, 2022 | In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a con... |
| CVE-2022-20473 | CRITICAL | 9.8 | 8.9% | Dec 13, 2022 | In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This c... |
| CVE-2022-20472 | CRITICAL | 9.8 | 6.6% | Dec 13, 2022 | In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This c... |
| CVE-2022-20471 | MEDIUM | 5.5 | 0.1% | Dec 13, 2022 | In SendIncDecRestoreCmdPart2 of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. T... |
| CVE-2022-20470 | HIGH | 7.8 | 0.2% | Dec 13, 2022 | In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due... |
| CVE-2022-20469 | HIGH | 8.8 | 0.2% | Dec 13, 2022 | In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a missing bounds check. This co... |
| CVE-2022-20468 | MEDIUM | 6.5 | 0.1% | Dec 13, 2022 | In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could ... |
| CVE-2022-20466 | MEDIUM | 5.5 | 0.1% | Dec 13, 2022 | In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's passw... |
| CVE-2022-20449 | MEDIUM | 4.4 | 0.1% | Dec 13, 2022 | In writeApplicationRestrictionsLAr of UserManagerService.java, there is a possible overwrite of system files due to a pa... |
| CVE-2022-20444 | — | — | — | Dec 13, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-20442 | HIGH | 7.3 | 0.1% | Dec 13, 2022 | In onCreate of ReviewPermissionsActivity.java, there is a possible way to grant permissions for a separate app with API ... |
| CVE-2022-20411 | HIGH | 8.8 | 1.9% | Dec 13, 2022 | In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead... |
| CVE-2022-20240 | LOW | 2.3 | 0.1% | Dec 13, 2022 | In sOpAllowSystemRestrictionBypass of AppOpsManager.java, there is a possible leak of location information due to a miss... |
| CVE-2022-46363 | HIGH | 7.5 | 1.2% | Dec 13, 2022 | A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing ... |
| CVE-2022-46059 | MEDIUM | 6.5 | 0.3% | Dec 13, 2022 | AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF). |
| CVE-2022-45871 | HIGH | 7.5 | 0.4% | Dec 13, 2022 | A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the ... |
| CVE-2022-45693 | HIGH | 7.5 | 1.4% | Dec 13, 2022 | Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attac... |
| CVE-2022-45690 | HIGH | 7.5 | 0.9% | Dec 13, 2022 | A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attacke... |
| CVE-2022-45689 | HIGH | 7.5 | 0.8% | Dec 13, 2022 | hutool-json v5.8.10 was discovered to contain an out of memory error. |
| CVE-2022-45688 | HIGH | 7.5 | 1.2% | Dec 13, 2022 | A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service ... |
| CVE-2022-45685 | HIGH | 7.5 | 1.4% | Dec 13, 2022 | A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data. |
| CVE-2022-44636 | MEDIUM | 4.6 | 0.2% | Dec 13, 2022 | The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spo... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now