2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-29112 | MEDIUM | 6.5 | 3.0% | May 10, 2022 | Windows Graphics Component Information Disclosure Vulnerability |
| CVE-2022-29107 | MEDIUM | 5.5 | 2.6% | May 10, 2022 | Microsoft Office Security Feature Bypass Vulnerability |
| CVE-2022-29102 | MEDIUM | 5.5 | 0.8% | May 10, 2022 | Windows Failover Cluster Information Disclosure Vulnerability |
| CVE-2022-28601 | MEDIUM | 6.5 | 1.6% | May 10, 2022 | A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote att... |
| CVE-2022-26940 | MEDIUM | 6.5 | 2.3% | May 10, 2022 | Remote Desktop Protocol Client Information Disclosure Vulnerability |
| CVE-2022-26936 | MEDIUM | 6.5 | 2.7% | May 10, 2022 | Windows Server Service Information Disclosure Vulnerability |
| CVE-2022-26935 | MEDIUM | 6.5 | 1.0% | May 10, 2022 | Windows WLAN AutoConfig Service Information Disclosure Vulnerability |
| CVE-2022-26934 | MEDIUM | 6.5 | 2.6% | May 10, 2022 | Windows Graphics Component Information Disclosure Vulnerability |
| CVE-2022-26933 | MEDIUM | 5.5 | 0.8% | May 10, 2022 | Windows NTFS Information Disclosure Vulnerability |
| CVE-2022-26930 | MEDIUM | 5.5 | 0.8% | May 10, 2022 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
| CVE-2022-26925 | MEDIUM | 5.9 | 9.8% | May 10, 2022 | Windows LSA Spoofing Vulnerability |
| CVE-2022-24466 | MEDIUM | 4.1 | 0.7% | May 10, 2022 | Windows Hyper-V Security Feature Bypass Vulnerability |
| CVE-2022-22713 | MEDIUM | 5.6 | 0.7% | May 10, 2022 | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2022-22015 | MEDIUM | 6.5 | 2.3% | May 10, 2022 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
| CVE-2022-22011 | MEDIUM | 5.5 | 0.8% | May 10, 2022 | Windows Graphics Component Information Disclosure Vulnerability |
| CVE-2022-20121 | MEDIUM | 5.5 | 0.1% | May 10, 2022 | In getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing permission check. This co... |
| CVE-2022-20119 | MEDIUM | 5.5 | 0.1% | May 10, 2022 | In private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to uninitialized data. This... |
| CVE-2022-20117 | MEDIUM | 5.5 | 0.1% | May 10, 2022 | In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. Thi... |
| CVE-2022-1431 | MEDIUM | 5.3 | 1.4% | May 10, 2022 | An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting f... |
| CVE-2022-1417 | MEDIUM | 4.3 | 0.9% | May 10, 2022 | Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting f... |
| CVE-2022-0866 | MEDIUM | 5.3 | 0.8% | May 10, 2022 | This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an ... |
| CVE-2022-30278 | MEDIUM | 6.1 | 0.8% | May 10, 2022 | A vulnerability in Black Duck Hub’s embedded MadCap Flare documentation files could allow an unauthenticated remote atta... |
| CVE-2022-20115 | MEDIUM | 5.5 | 0.1% | May 10, 2022 | In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information wit... |
| CVE-2022-20112 | MEDIUM | 5.5 | 0.1% | May 10, 2022 | In getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a guest user to change priv... |
| CVE-2022-20011 | MEDIUM | 5.5 | 0.1% | May 10, 2022 | In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to mi... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now