December 2022

7 results · Clear filters · Feed

• High 8.8
  CVE-2022-26485 Exploited Public exploit EPSS 14%

  Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of a…

  Mozilla Firefox Thunderbird Firefox ESR Android Browsers Debian Ubuntu Alpine
  Dec 22, 2022

  KEV Mar 7, 2022
• Critical 9.6
  CVE-2022-26486 Exploited

  An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We hav…

  Mozilla Firefox Thunderbird Firefox ESR Android Browsers Debian Ubuntu Alpine
  Dec 22, 2022

  KEV Mar 7, 2022
• High 8.8
  CVE-2022-42856 Exploited

  A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS…

  Apple tvOS qtwebkit-source qtwebkit-opensource-src Debian Ubuntu
  Dec 15, 2022

  KEV Dec 14, 2022
• Critical 9.8
  CVE-2022-27518 Exploited Public exploit

  Unauthenticated remote arbitrary code execution

  Unauthenticated remote arbitrary code execution

  Citrix Citrix Gateway, Citrix ADC Network devices
  Dec 13, 2022

  KEV Dec 13, 2022
• Medium 5.4
  CVE-2022-44698 Exploited · Ransomware EPSS 75%

  Windows SmartScreen Security Feature Bypass Vulnerability

  Windows SmartScreen Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows 10 Version 1809 Windows Server 2022 Windows
  Dec 13, 2022

  KEV Dec 13, 2022
• Critical 9.8
  CVE-2022-46169 Exploited Public exploit Scanner template EPSS 100%

  Unauthenticated Command Injection

  Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. In affected versions a command injection vulnerability allows an unauthenticated user to execute arbitrary code on a serve…

  Cacti cacti cacti cacti Debian Ubuntu
  Dec 5, 2022

  KEV Feb 16, 2023
• High 8.8
  CVE-2022-4262 Exploited Public exploit EPSS 24%

  Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corr…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Dec 2, 2022

  KEV Dec 5, 2022