2022 CVE Vulnerabilities
27,538 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-20425 | MEDIUM | 5.5 | 0.1% | Oct 11, 2022 | In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent degradation of performance due to resource e... |
| CVE-2022-20423 | MEDIUM | 4.6 | 0.2% | Oct 11, 2022 | In rndis_set_response of rndis.c, there is a possible out of bounds write due to an integer overflow. This could lead to... |
| CVE-2022-20422 | HIGH | 7 | 0.1% | Oct 11, 2022 | In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This... |
| CVE-2022-20421 | HIGH | 7.8 | 0.6% | Oct 11, 2022 | In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could le... |
| CVE-2022-20420 | HIGH | 7.8 | 0.1% | Oct 11, 2022 | In getBackgroundRestrictionExemptionReason of AppRestrictionController.java, there is a possible way to bypass device po... |
| CVE-2022-20419 | HIGH | 7.8 | 0.1% | Oct 11, 2022 | In setOptions of ActivityRecord.java, there is a possible load any arbitrary Java code into launcher process due to a lo... |
| CVE-2022-20418 | HIGH | 7.5 | 0.4% | Oct 11, 2022 | In pickStartSeq of AAVCAssembler.cpp, there is a possible out of bounds read due to a missing bounds check. This could l... |
| CVE-2022-20417 | HIGH | 7.8 | 0.1% | Oct 11, 2022 | In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This... |
| CVE-2022-20416 | HIGH | 7.8 | 0.1% | Oct 11, 2022 | In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This... |
| CVE-2022-20415 | HIGH | 7.8 | 0.1% | Oct 11, 2022 | In handleFullScreenIntent of StatusBarNotificationActivityStarter.java, there is a possible bypass of the restriction of... |
| CVE-2022-20413 | MEDIUM | 5.5 | 0.3% | Oct 11, 2022 | In start of Threads.cpp, there is a possible way to record audio during a phone call due to a logic error in the code. T... |
| CVE-2022-20412 | MEDIUM | 6.7 | 0.1% | Oct 11, 2022 | In fdt_next_tag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to lo... |
| CVE-2022-20410 | HIGH | 7.5 | 0.6% | Oct 11, 2022 | In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to an integer overflow. This... |
| CVE-2022-20409 | MEDIUM | 6.7 | 0.6% | Oct 11, 2022 | In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to ... |
| CVE-2022-20394 | MEDIUM | 5 | 0.1% | Oct 11, 2022 | In getInputMethodWindowVisibleHeight of InputMethodManagerService.java, there is a possible way to determine when anothe... |
| CVE-2022-20351 | MEDIUM | 5.5 | 0.1% | Oct 11, 2022 | In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due to SQL injection. This... |
| CVE-2022-41083 | HIGH | 7.8 | 0.6% | Oct 11, 2022 | Visual Studio Code Elevation of Privilege Vulnerability |
| CVE-2022-41081 | HIGH | 8.1 | 1.4% | Oct 11, 2022 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
| CVE-2022-41043 | LOW | 3.3 | 0.8% | Oct 11, 2022 | Microsoft Office Information Disclosure Vulnerability |
| CVE-2022-41042 | HIGH | 7.4 | 1.9% | Oct 11, 2022 | Visual Studio Code Information Disclosure Vulnerability |
| CVE-2022-41038 | HIGH | 8.8 | 2.6% | Oct 11, 2022 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2022-41037 | HIGH | 8.8 | 1.6% | Oct 11, 2022 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2022-41036 | HIGH | 8.8 | 1.6% | Oct 11, 2022 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2022-41035 | MEDIUM | 5.3 | 1.3% | Oct 11, 2022 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2022-41034 | HIGH | 7.8 | 67.5% | Oct 11, 2022 | Visual Studio Code Remote Code Execution Vulnerability |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now