2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0458 | HIGH | 8.8 | 0.7% | Apr 5, 2022 | Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially ex... |
| CVE-2022-0457 | HIGH | 8.8 | 0.7% | Apr 5, 2022 | Type confusion in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corrup... |
| CVE-2022-0456 | HIGH | 8.8 | 0.7% | Apr 5, 2022 | Use after free in Web Search in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit hea... |
| CVE-2022-0454 | HIGH | 8.8 | 0.9% | Apr 5, 2022 | Heap buffer overflow in ANGLE in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit he... |
| CVE-2022-0453 | HIGH | 8.8 | 0.7% | Apr 5, 2022 | Use after free in Reader Mode in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the r... |
| CVE-2022-23732 | HIGH | 8.8 | 1.7% | Apr 5, 2022 | A path traversal vulnerability was identified in GitHub Enterprise Server management console that allowed the bypass of ... |
| CVE-2022-0610 | HIGH | 8.8 | 0.8% | Apr 5, 2022 | Inappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potenti... |
| CVE-2022-0609 | HIGH | 8.8 | 23.5% | Apr 5, 2022 | Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit hea... |
| CVE-2022-0608 | HIGH | 8.8 | 1.1% | Apr 5, 2022 | Integer overflow in Mojo in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap c... |
| CVE-2022-0607 | HIGH | 8.8 | 0.8% | Apr 5, 2022 | Use after free in GPU in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corr... |
| CVE-2022-0606 | HIGH | 8.8 | 0.8% | Apr 5, 2022 | Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap co... |
| CVE-2022-0605 | HIGH | 8.8 | 0.6% | Apr 5, 2022 | Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to insta... |
| CVE-2022-0604 | HIGH | 8.8 | 0.7% | Apr 5, 2022 | Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to i... |
| CVE-2022-0603 | HIGH | 8.8 | 0.8% | Apr 5, 2022 | Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potenti... |
| CVE-2022-27442 | HIGH | 7.5 | 1.0% | Apr 4, 2022 | TPCMS v3.2 allows attackers to access the ThinkPHP log directory and obtain sensitive information such as the administra... |
| CVE-2022-27650 | HIGH | 7.5 | 1.1% | Apr 4, 2022 | A flaw was found in crun where containers were incorrectly started with non-empty default permissions. A vulnerability w... |
| CVE-2022-27649 | HIGH | 7.5 | 1.4% | Apr 4, 2022 | A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerabilit... |
| CVE-2022-23699 | HIGH | 7.8 | 0.3% | Apr 4, 2022 | A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has ... |
| CVE-2022-23698 | HIGH | 7.5 | 1.4% | Apr 4, 2022 | A remote unauthenticated disclosure of information vulnerability was discovered in HPE OneView version(s): Prior to 6.6.... |
| CVE-2022-1174 | HIGH | 7.5 | 1.4% | Apr 4, 2022 | A potential DoS vulnerability was discovered in Gitlab CE/EE versions 13.7 before 14.7.7, all versions starting from 14.... |
| CVE-2022-26572 | HIGH | 7.5 | 0.9% | Apr 4, 2022 | Xerox ColorQube 8580 was discovered to contain an access control issue which allows attackers to print, view the status,... |
| CVE-2022-24801 | HIGH | 8.1 | 2.8% | Apr 4, 2022 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to version 22.4.0rc1, the T... |
| CVE-2022-24787 | HIGH | 7.5 | 1.0% | Apr 4, 2022 | Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. In version 0.3.1 and prior, bytestrings ca... |
| CVE-2022-24785 | HIGH | 7.5 | 5.7% | Apr 4, 2022 | Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vul... |
| CVE-2022-0887 | HIGH | 7.2 | 1.3% | Apr 4, 2022 | The Easy Social Icons WordPress plugin before 3.1.4 does not sanitize the selected_icons attribute to the cnss_widget be... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now