Week 50, 2022
12–18 December 2022
Newly exploited 6
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
-
High 8.8
CVE-2022-42856 KEV Dec 14, 2022 A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.…EPSS 8.5%
-
Critical 9.8
CVE-2022-26501 KEV Dec 13, 2022 · ransomware Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).EPSS 4.1%
- Critical 9.8 EPSS 6.9%
-
Critical 9.3
CVE-2022-42475 KEV Dec 13, 2022 · ransomware A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6…EPSS 99%
-
High 8.8
CVE-2022-26500 KEV Dec 13, 2022 · ransomware Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions …EPSS 5.8%
-
Medium 5.4
CVE-2022-44698 KEV Dec 13, 2022 · ransomware Windows SmartScreen Security Feature Bypass VulnerabilityEPSS 75%
Microsoft · Windows Server 2019 · Windows 10 Version 1809 · Windows Server 2022
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
- Critical 9.8 EPSS 21%
- Critical 9.8 EPSS 19%
-
Critical 9.8
CVE-2022-38488 logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter.EPSS 14%
-
Critical 9.8
CVE-2022-20473 In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with…EPSS 8.9%
- Critical 9.8 EPSS 6.9%
-
Critical 9.8
CVE-2022-20472 In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with…EPSS 6.6%
-
Critical 9.8
CVE-2022-45005 IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the cmd_get_ping_output function.EPSS 5.4%
- Critical 9.8 EPSS 4.8%
-
Critical 9.8
CVE-2022-46071 There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to bypass admin access.EPSS 4.7%
-
Critical 9.8
CVE-2022-44832 D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function.EPSS 4%
- Critical 9.1 EPSS 3.3%
- Critical 9.8 EPSS 2.5%
- Critical 9.9 EPSS 2.4%
-
Critical 9.8
CVE-2022-42842 The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 1…EPSS 2.4%
-
Critical 9.8
CVE-2022-42837 An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventur…EPSS 2.3%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
High 8.8
CVE-2022-44690 Microsoft SharePoint Server Remote Code Execution VulnerabilityEPSS 82%
Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server Subscription Edition
- High 8.8 EPSS 80%
-
Medium 5.4
CVE-2022-44698 Windows SmartScreen Security Feature Bypass VulnerabilityEPSS 75%
Microsoft · Windows Server 2019 · Windows 10 Version 1809 · Windows Server 2022
-
High 8.5
CVE-2022-41076 PowerShell Remote Code Execution VulnerabilityEPSS 61%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
-
High 7.0
CVE-2022-46689 A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, i…EPSS 48%
-
Medium 5.3
CVE-2022-31698 The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Serv…EPSS 48%
-
High 7.8
CVE-2022-44666 Windows Contacts Remote Code Execution VulnerabilityEPSS 41%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
-
High 8.8
CVE-2022-37155 RCE in SPIP 3.1.13 through 4.1.2 allows remote authenticated users to execute arbitrary code via the _oups parameter.EPSS 40%
Advisories
- BSI CERT-Bund (WID) 643 critical
- SUSE / openSUSE Security Updates 526 critical
- Microsoft Security Response Center 516 critical
- CISA ICS & IT advisories 243 critical
- Siemens ProductCERT 201 critical
- Ubuntu Security Notices (USN) 163 critical
- Debian Security (DSA / DLA) 135 critical
- Oracle Linux Security Advisories (ELSA) 9
- AlmaLinux Security Advisories 6
- CERT@VDE 51 critical
- Rocky Linux Security Advisories 3
- Schneider Electric CPCERT 31 critical
- ICSA-22-349-21 Siemens SCALANCE X-200RNA Switch Devices 83 CVEs
- SSA-412672 SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 83 CVEs
- WID-SEC-2022-2313 Apple macOS: Mehrere Schwachstellen 46 CVEs
- SUSE-SU-2022:4439-1 Security update for SUSE Manager Client Tools 12 CVEs
- SUSE-SU-2022:4437-1 Security update for SUSE Manager Client Tools 12 CVEs
- SUSE-SU-2022:4428-1 Security update for grafana 12 CVEs
- DSA-5303-1 thunderbird - security update 7 CVEs
- SUSE-SU-2022:4462-1 Security update for MozillaFirefox 7 CVEs
- SUSE-SU-2022:4461-1 Security update for MozillaFirefox 7 CVEs
- SUSE-SU-2022:4460-1 Security update for MozillaFirefox 7 CVEs