2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-22983 | MEDIUM | 5.9 | 0.3% | Aug 10, 2022 | VMware Workstation (16.x prior to 16.2.4) contains an unprotected storage of credentials vulnerability. A malicious acto... |
| CVE-2022-20361 | CRITICAL | 9.8 | 0.9% | Aug 10, 2022 | In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakn... |
| CVE-2022-20360 | HIGH | 7.8 | 0.2% | Aug 10, 2022 | In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could lead to local escal... |
| CVE-2022-20359 | — | — | — | Aug 10, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2022-20358 | LOW | 3.3 | 0.2% | Aug 10, 2022 | In startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected content of content provide... |
| CVE-2022-20357 | MEDIUM | 5.5 | 0.1% | Aug 10, 2022 | In writeToParcel of SurfaceControl.cpp, there is a possible information disclosure due to uninitialized data. This could... |
| CVE-2022-20356 | HIGH | 7.8 | 0.1% | Aug 10, 2022 | In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service ... |
| CVE-2022-20355 | MEDIUM | 5.5 | 0.1% | Aug 10, 2022 | In get of PacProxyService.java, there is a possible system service crash due to improper input validation. This could le... |
| CVE-2022-20354 | HIGH | 7.8 | 0.1% | Aug 10, 2022 | In onDefaultNetworkChanged of Vpn.java, there is a possible way to disable VPN due to a logic error in the code. This co... |
| CVE-2022-20353 | MEDIUM | 5.5 | 0.1% | Aug 10, 2022 | In onSaveRingtone of DefaultRingtonePreference.java, there is a possible inappropriate file read due to improper input v... |
| CVE-2022-20352 | MEDIUM | 5.5 | 0.1% | Aug 10, 2022 | In addProviderRequestListener of LocationManagerService.java, there is a possible way to learn which packages request lo... |
| CVE-2022-20350 | MEDIUM | 5.5 | 0.1% | Aug 10, 2022 | In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notific... |
| CVE-2022-20349 | HIGH | 7.8 | 0.1% | Aug 10, 2022 | In WifiScanningPreferenceController and BluetoothScanningPreferenceController, there is a possible admin restriction byp... |
| CVE-2022-20348 | HIGH | 7.8 | 0.1% | Aug 10, 2022 | In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin restriction bypass du... |
| CVE-2022-20347 | HIGH | 8.8 | 0.8% | Aug 10, 2022 | In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. Th... |
| CVE-2022-20346 | MEDIUM | 6.5 | 0.4% | Aug 10, 2022 | In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incor... |
| CVE-2022-20345 | HIGH | 8.8 | 0.4% | Aug 10, 2022 | In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. This cou... |
| CVE-2022-20344 | HIGH | 7 | 0.1% | Aug 10, 2022 | In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race... |
| CVE-2022-20239 | CRITICAL | 9.8 | 0.2% | Aug 10, 2022 | remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm... |
| CVE-2022-1962 | MEDIUM | 5.5 | 0.9% | Aug 10, 2022 | Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a ... |
| CVE-2022-1705 | MEDIUM | 6.5 | 1.1% | Aug 10, 2022 | Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 al... |
| CVE-2022-35715 | HIGH | 7.5 | 0.8% | Aug 10, 2022 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed tec... |
| CVE-2022-35280 | CRITICAL | 9.8 | 0.7% | Aug 10, 2022 | IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have strong passwords by de... |
| CVE-2022-34365 | MEDIUM | 6.5 | 0.7% | Aug 10, 2022 | WMS 3.7 contains a Path Traversal Vulnerability in Device API. An attacker could potentially exploit this vulnerability,... |
| CVE-2022-33931 | MEDIUM | 5.3 | 0.4% | Aug 10, 2022 | Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An attacker with no ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now