Week 43, 2022
24–30 October 2022
Newly exploited 8
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
-
High 8.8
CVE-2022-3723 KEV Oct 28, 2022 Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…EPSS 7.9%
-
High 7.8
CVE-2022-42827 KEV Oct 25, 2022 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An appli…EPSS 1.1%
-
Critical 9.8
CVE-2018-19323 KEV Oct 24, 2022 · ransomware The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.0…EPSS 8.4%
-
High 7.8
CVE-2018-19320 KEV Oct 24, 2022 · ransomware The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.0…EPSS 4.6%
-
High 7.8
CVE-2018-19322 KEV Oct 24, 2022 · ransomware The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC…EPSS 1.8%
-
High 7.8
CVE-2020-3433 KEV Oct 24, 2022 · ransomware Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityEPSS 10%
-
High 7.8
CVE-2018-19321 KEV Oct 24, 2022 · ransomware The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC…EPSS 3.7%
-
Medium 6.5
CVE-2020-3153 KEV Oct 24, 2022 · ransomware Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityEPSS 29%
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2022-43775 The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.EPSS 22%
- Critical 9.8 EPSS 16%
-
Critical 9.1
CVE-2022-31678 VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit…EPSS 9.4%
-
Critical 10.0
CVE-2022-30603 An OS command injection vulnerability exists in the web interface /action/iperf functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z…EPSS 5.6%
-
Critical 10.0
CVE-2022-29472 An OS command injection vulnerability exists in the web interface util_set_serial_mac functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X an…EPSS 4.8%
-
Critical 10.0
CVE-2022-33207 Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit…EPSS 4.6%
-
Critical 10.0
CVE-2022-33206 Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit…EPSS 4.6%
-
Critical 10.0
CVE-2022-33205 Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit…EPSS 4.6%
-
Critical 10.0
CVE-2022-33204 Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit…EPSS 4.6%
-
Critical 9.8
CVE-2022-29851 documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file conversion may occu…EPSS 3.9%
-
Critical 9.1
CVE-2022-33150 An OS command injection vulnerability exists in the js_package install functionality of Robustel R1510 3.1.16. A specially-crafted network request can lead to …EPSS 3.9%
-
Critical 9.8
CVE-2022-42468 Apache Flume prior to 1.11.0 has an Improper Input Validation (JNDI Injection) in JMSSourceEPSS 3.8%
-
Critical 10.0
CVE-2022-33189 An OS command injection vulnerability exists in the XCMD setAlexa functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z. A specially-crafted X…EPSS 3.7%
-
Critical 9.1
CVE-2022-32765 An OS command injection vulnerability exists in the sysupgrade command injection functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network …EPSS 3.7%
-
Critical 9.1
CVE-2022-34850 An OS command injection vulnerability exists in the web_server /action/import_authorized_keys/ functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-cr…EPSS 3.6%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
- High 8.8 EPSS 27%
-
High 8.8
CVE-2022-38181 The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through…EPSS 18%
-
Medium 6.8
CVE-2022-31898 gl-inet GL-MT300N-V2 Mango v3.212 and GL-AX1800 Flint v3.214 were discovered to contain multiple command injection vulnerabilities via the ping_addr and trace_…EPSS 16%
-
Medium 6.5
CVE-2022-3387 Advantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks. An unauthorized attacker could remotely exploit vulnerable PHP code to d…EPSS 14%
- High 8.7 EPSS 11%
- High 8.7 EPSS 11%
- High 8.7 EPSS 11%
- High 8.7 EPSS 11%
Advisories
- SUSE / openSUSE Security Updates 6610 critical
- Oracle Linux Security Advisories (ELSA) 40
- Debian Security (DSA / DLA) 232 critical
- BSI CERT-Bund (WID) 21
- AlmaLinux Security Advisories 16
- Rocky Linux Security Advisories 15
- Ubuntu Security Notices (USN) 144 critical
- CISA ICS & IT advisories 103 critical
- ICSA-22-298-07 Delta Electronics InfraSuite Device Master 10 CVEs
- DLA-3164-1 python-django - security update 5 CVEs
- SUSE-SU-2022:3761-1 Security update for release-notes-susemanager, release-notes-susemanager-proxy 5 CVEs
- SUSE-SU-2022:3797-1 Security update for libtasn1 3 CVEs
- USN-5702-1 curl vulnerabilities 3 CVEs
- ICSA-22-298-01 Haas Controller 3 CVEs
- SUSE-SU-2022:3785-1 Security update for curl 2 CVEs
- SUSE-SU-2022:3774-1 Security update for curl 2 CVEs
- SUSE-SU-2022:3772-1 Security update for curl 2 CVEs
- SUSE-SU-2022:3750-1 Security update for SUSE Manager Server 4.3 2 CVEs