July 2022

8 results · Clear filters · Feed

• High 8.8
  CVE-2022-2294 Exploited · Ransomware EPSS 71%

  Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploi…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Jul 28, 2022

  KEV Aug 25, 2022
• High 8.8
  CVE-2022-1364 Exploited Public exploit EPSS 14%

  Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Jul 26, 2022

  KEV Apr 15, 2022
• High 8.8
  CVE-2022-1096 Exploited Public exploit EPSS 25%

  Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corru…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Jul 22, 2022

  KEV Mar 28, 2022
• Critical 9.8
  CVE-2022-26138 Exploited Public exploit Scanner template EPSS 98%

  The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in t…

  Atlassian Questions For Confluence Web / CMS
  Jul 20, 2022

  KEV Jul 29, 2022
• Critical 9.8
  CVE-2022-35405 Exploited Public exploit Scanner template EPSS 100%

  Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote cod…

  Jul 19, 2022

  KEV Sep 22, 2022
• High 8.8
  CVE-2022-33891 Exploited Public exploit Scanner template EPSS 93%

  Apache Spark shell command injection vulnerability via Spark UI

  The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in H…

  Apache Software Foundation Apache Spark pyspark org.apache.spark:spark-parent_2.12 Maven PyPI
  Jul 18, 2022

  KEV Mar 7, 2023
• Critical 9.8
  CVE-2022-26352 Exploited · Ransomware Public exploit Scanner template EPSS 91%

  An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can craft a multipart form re…

  Jul 17, 2022

  KEV Aug 25, 2022
• High 7.8
  CVE-2022-22047 Exploited EPSS 18%

  Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

  Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 12, 2022

  KEV Jul 12, 2022