↓ Skip to main content

Vulnerability

One CVE per post: what it hits, what fixes it, who exploits it.

November 2022

21

CVE-2022-41622 - F5 BIG-IP and BIG-IQ CSRF leads to RCE Vulnerability

1

CVE-2022-3602 - OpenSSL email address overflow downgraded to High Vulnerability

1

CVE-2022-3602 - Critical OpenSSL 3.0.x security fix announced Vulnerability

October 2022

19

CVE-2022-42948 - Cobalt Strike 4.7.2 fixes RCE left by the 4.7.1 patch Vulnerability

11

CVE-2022-42889 - Apache Commons Text RCE via string interpolation Vulnerability

11

CVE-2022-41674 - Linux kernel WiFi bugs exploitable over the air Vulnerability

6

CVE-2022-41040 - Exchange ProxyNotShell mitigations bypassed repeatedly Vulnerability

6

CVE-2022-41352 - Zimbra RCE via cpio in Amavis Vulnerability

September 2022

28

CVE-2022-41040 - Exchange zero-days exploited before a patch existed Vulnerability

28

CVE-2022-39197 - Cobalt Strike 4.7.1 fixes XSS via Beacon username Vulnerability

28

CVE-2022-40674 - Use-after-free in the libexpat XML parser Vulnerability

2

CVE-2022-2992 - GitLab RCE via GitHub import, again Vulnerability

August 2022

23

CVE-2022-22715 - Windows Dirty Pipe: a ushort overflow in npfs.sys escapes the Adobe Reader sandbox Vulnerability

18

CVE-2022-27255 - Realtek eCos SDK SIP ALG buffer overflow Vulnerability

18

CVE-2022-32893 - Apple fixes two exploited 0days in WebKit and kernel Vulnerability

18

CVE-2022-2856 - Chrome Intents flaw exploited in the wild Vulnerability

12

CVE-2022-34713 - DogWalk MSDT flaw exploited and finally patched Vulnerability

12

CVE-2022-20866 - Cisco ASA and FTD can leak RSA private keys Vulnerability

12

CVE-2022-21233 - ÆPIC Leak reads stale data from Intel APIC registers Vulnerability

12

CVE-2022-30333 - unrar symlink check bypass gives pre-auth RCE on Zimbra Vulnerability

July 2022

25

CVE-2022-26138 - Hardcoded account in Questions For Confluence app Vulnerability

15

CVE-2022-29900 - Retbleed: Spectre-BTI via return instructions Vulnerability

6

CVE-2022-2294 - Chrome WebRTC Zero-Day Vulnerability

6

CVE-2021-43138 - IBM Business Automation Workflow RCE Vulnerability

6

CVE-2022-34893 - Trend Micro Maximum Security LPE Vulnerability