CVEs from 2022

5,249 normalized CVEs published or assigned in this year.

Total
5,249
critical
critical 92
high
high 1,233
medium
medium 961
low
low 24
% Critical
1.8%
% with KEV
2.5%
% with exploit
3.4%

Top products

  • jdk 116
  • jre 109
  • openjdk 100
  • zulu 82
  • graalvm 74
  • cloud_secure_agent 35
  • oncommand_insight 34
  • cloud_insights_acquisition_unit 34
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Flags OS Vendor Published Description
CVE-2022-3305 unknown Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Hig…
CVE-2022-49082 unknown In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix use after free in _scsih_expander_node_remove() The function mpt3sas_transport_port_remove() called in _scsih_…
CVE-2022-3310 unknown Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via…
CVE-2022-3314 unknown Use after free in logging in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbox escape via a crafted HTML page. (Chrom…
CVE-2022-45059 unknown An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-…
CVE-2022-4908 unknown Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2022-4914 unknown Heap buffer overflow in PrintPreview in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a cra…
CVE-2022-29910 unknown When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.<br>*Note: This issue only affected Firefox for Android. Other operating systems are una…
CVE-2022-4923 unknown Inappropriate implementation in Omnibox in Google Chrome prior to 99.0.4844.51 allowed an attacker in a privileged network position to perform a man-in-the-middle attack via malicious network traffic…
CVE-2022-4919 unknown Use after free in Base Internals in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
CVE-2022-0213 unknown vim is vulnerable to Heap-based Buffer Overflow
CVE-2022-0156 unknown vim is vulnerable to Use After Free
CVE-2022-0128 unknown vim is vulnerable to Out-of-bounds Read
CVE-2022-0319 unknown Out-of-bounds Read in vim/vim prior to 8.2.
CVE-2022-0158 unknown vim is vulnerable to Heap-based Buffer Overflow
CVE-2022-2205 unknown
CVE-2022-0351 unknown Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.
CVE-2022-0368 unknown Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-0393 unknown Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-0407 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0408 unknown Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-22736 unknown If Firefox was installed to a world-writable directory, a local privilege escalation could occur when Firefox searched the current directory for system libraries. However the install directory is not…
CVE-2022-0417 unknown Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2.
CVE-2022-0443 unknown Use After Free in GitHub repository vim/vim prior to 8.2.
CVE-2022-0572 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0629 unknown Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0696 unknown NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428.
CVE-2022-0714 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436.
CVE-2022-0729 unknown Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.
CVE-2022-1381 unknown global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible …
CVE-2022-1616 unknown Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote ex…
CVE-2022-1619 unknown Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote ex…
CVE-2022-1620 unknown NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allow…
CVE-2022-1720 unknown Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.
CVE-2022-1674 unknown NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allow…
CVE-2022-1725 unknown NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959.
CVE-2022-1733 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.
CVE-2022-1735 unknown Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.
CVE-2022-1769 unknown Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.
CVE-2022-1796 unknown Use After Free in GitHub repository vim/vim prior to 8.2.4979.
CVE-2022-1851 unknown Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-1886 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-1898 unknown Use After Free in GitHub repository vim/vim prior to 8.2.
CVE-2022-2208 unknown NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.
CVE-2022-1942 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-1968 unknown Use After Free in GitHub repository vim/vim prior to 8.2.
CVE-2022-2124 unknown Buffer Over-read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2042 unknown Use After Free in GitHub repository vim/vim prior to 8.2.
CVE-2022-2125 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-2129 unknown Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-2183 unknown Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2175 unknown Buffer Over-read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2182 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-2206 unknown Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2207 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-2231 unknown NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.
CVE-2022-2210 unknown Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-2257 unknown Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2285 unknown Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.
CVE-2022-2264 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
CVE-2022-2284 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
CVE-2022-2286 unknown Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2287 unknown Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2288 unknown Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.
CVE-2022-2522 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061.
CVE-2022-2816 unknown Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212.
CVE-2022-2344 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.
CVE-2022-2289 unknown Use After Free in GitHub repository vim/vim prior to 9.0.
CVE-2022-2304 unknown Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
CVE-2022-2343 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044.
CVE-2022-2345 unknown Use After Free in GitHub repository vim/vim prior to 9.0.0046.
CVE-2022-2571 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.
CVE-2022-2845 unknown Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218.
CVE-2022-2580 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.
CVE-2022-2581 unknown Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104.
CVE-2022-2598 unknown Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100.
CVE-2022-2817 unknown Use After Free in GitHub repository vim/vim prior to 9.0.0213.
CVE-2022-2819 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.
CVE-2022-2849 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.
CVE-2022-2862 unknown Use After Free in GitHub repository vim/vim prior to 9.0.0221.
CVE-2022-2874 unknown NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224.
CVE-2022-2889 unknown Use After Free in GitHub repository vim/vim prior to 9.0.0225.
CVE-2022-2982 unknown Use After Free in GitHub repository vim/vim prior to 9.0.0260.
CVE-2022-2923 unknown NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240.
CVE-2022-3134 unknown Use After Free in GitHub repository vim/vim prior to 9.0.0389.
CVE-2022-2946 unknown Use After Free in GitHub repository vim/vim prior to 9.0.0246.
CVE-2022-2980 unknown NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.
CVE-2022-3153 unknown NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
CVE-2022-3016 unknown Use After Free in GitHub repository vim/vim prior to 9.0.0286.
CVE-2022-3037 unknown Use After Free in GitHub repository vim/vim prior to 9.0.0322.
CVE-2022-3099 unknown Use After Free in GitHub repository vim/vim prior to 9.0.0360.
CVE-2022-3234 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.
CVE-2022-3235 unknown Use After Free in GitHub repository vim/vim prior to 9.0.0490.
CVE-2022-3352 unknown Use After Free in GitHub repository vim/vim prior to 9.0.0614.
CVE-2022-3491 unknown Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742.
CVE-2022-3256 unknown Use After Free in GitHub repository vim/vim prior to 9.0.0530.
CVE-2022-3278 unknown NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552.
CVE-2022-3296 unknown Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.
CVE-2022-4141 unknown Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.
CVE-2022-3297 unknown Use After Free in GitHub repository vim/vim prior to 9.0.0579.