2022 CVE Vulnerabilities

27,632 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-28630HIGH7.3A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s)...
CVE-2022-28629HIGH7.8A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s)...
CVE-2022-28628HIGH8.4A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s)...
CVE-2022-28627HIGH8.4A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s)...
CVE-2022-28626MEDIUM6.7A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s)...
CVE-2022-20362HIGH8.8In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code executi...
CVE-2022-20342LOW3.3In WiFi, there is a possible disclosure of WiFi password to the end user due to an insecure default value. This could le...
CVE-2022-20341MEDIUM5.5In ConnectivityService, there is a possible bypass of network permissions due to a missing permission check. This could ...
CVE-2022-20340LOW3.3In SELinux policy, there is a possible way of inferring which websites are being opened in the browser due to a missing ...
CVE-2022-20339LOW3.3In Android, there is a possible access of network neighbor table information due to an insecure SEpolicy configuration. ...
CVE-2022-20338LOW3.3In HierarchicalUri.readFrom of Uri.java, there is a possible way to craft a malformed Uri object due to improper input v...
CVE-2022-20336LOW3.3In Settings, there is a possible installed application disclosure due to a missing permission check. This could lead to ...
CVE-2022-20335LOW3.3In Wifi Slice, there is a possible way to adjust Wi-Fi settings even when the permission has been disabled due to a miss...
CVE-2022-20334MEDIUM6.5In Bluetooth, there are possible process crashes due to dereferencing a null pointer. This could lead to remote denial o...
CVE-2022-20333MEDIUM6.5In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with no...
CVE-2022-20332MEDIUM5.5In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to s...
CVE-2022-20331HIGH7.8In the Framework, there is a possible way to enable a work profile without user consent due to a tapjacking/overlay atta...
CVE-2022-20330LOW3.5In Bluetooth, there is a possible way to connect or disconnect bluetooth devices without user awareness due to a missing...
CVE-2022-20329HIGH7.8In Wifi, there is a possible way to enable Wifi without permissions due to a missing permission check. This could lead t...
CVE-2022-20328LOW3.3In PackageManager, there is a possible way to determine whether an app is installed due to a missing permission check. T...
CVE-2022-20327LOW2.8In Wi-Fi, there is a possible way to retrieve the WiFi SSID without location permissions due to a missing permission che...
CVE-2022-20326MEDIUM5.5In Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check. This could lead to lo...
CVE-2022-20325HIGH7.8In Media, there is a possible code execution due to a use after free. This could lead to local escalation of privilege w...
CVE-2022-20324MEDIUM5.5In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side c...
CVE-2022-20323MEDIUM5.5In PackageManager, there is a possible package installation disclosure due to a missing permission check. This could lea...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now