Archive

December 2022

Vulnerabilities first published in this month (UTC), newest first.

← November 2022 2022 / December January 2023 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

High 8.8

CVE-2022-26485 Exploited Public exploit EPSS 14%

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of a…

Mozilla Firefox Thunderbird Firefox ESR Android Browsers Debian Ubuntu Alpine

Dec 22, 2022
KEV Mar 7, 2022
Critical 9.8

CVE-2022-27518 Exploited Public exploit

Unauthenticated remote arbitrary code execution

Unauthenticated remote arbitrary code execution

Citrix Citrix Gateway, Citrix ADC Network devices

Dec 13, 2022
KEV Dec 13, 2022
Critical 9.8

CVE-2022-46169 Exploited Public exploit Scanner template EPSS 100%

Unauthenticated Command Injection

Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. In affected versions a command injection vulnerability allows an unauthenticated user to execute arbitrary code on a serve…

Cacti cacti cacti cacti Debian Ubuntu

Dec 5, 2022
KEV Feb 16, 2023
High 8.8

CVE-2022-4262 Exploited Public exploit EPSS 24%

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corr…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Dec 2, 2022
KEV Dec 5, 2022