Latest CVE Feed
-
5.5
MEDIUMCVE-2022-43254
GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_list_new at utils/list.c.... Read more
Affected Products : gpac- Published: Nov. 02, 2022
- Modified: May. 02, 2025
-
5.5
MEDIUMCVE-2022-42859
Multiple issues were addressed by removing the vulnerable code. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, watchOS 9.2. An app may be able to bypass Privacy preferences.... Read more
- Published: Dec. 15, 2022
- Modified: Apr. 21, 2025
-
5.5
MEDIUMCVE-2022-42798
The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. Parsing a maliciously crafted audio ... Read more
- Published: Nov. 01, 2022
- Modified: May. 05, 2025
-
5.5
MEDIUMCVE-2022-42703
mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.... Read more
Affected Products : linux_kernel- Published: Oct. 09, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-42793
An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. An app may be able to bypass code signing checks.... Read more
- Published: Nov. 01, 2022
- Modified: Apr. 22, 2025
-
5.5
MEDIUMCVE-2022-42781
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.... Read more
- Published: Dec. 06, 2022
- Modified: Apr. 23, 2025
-
5.5
MEDIUMCVE-2022-42814
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data.... Read more
Affected Products : macos- Published: Nov. 01, 2022
- Modified: Apr. 22, 2025
-
5.5
MEDIUMCVE-2022-42816
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system.... Read more
Affected Products : macos- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
5.5
MEDIUMCVE-2022-42535
In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: Androi... Read more
Affected Products : android- Published: Dec. 16, 2022
- Modified: Apr. 17, 2025
-
5.5
MEDIUMCVE-2022-42789
An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may be able to access user-sensitive data.... Read more
Affected Products : macos- Published: Nov. 01, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-42721
A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.... Read more
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
5.5
MEDIUMCVE-2022-42811
An access issue was addressed with additional sandbox restrictions. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to access user-sensitive data.... Read more
- Published: Nov. 01, 2022
- Modified: Apr. 22, 2025
-
5.5
MEDIUMCVE-2022-42866
The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to read sensitive location information.... Read more
- Published: Dec. 15, 2022
- Modified: Apr. 21, 2025
-
5.5
MEDIUMCVE-2022-42408
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious fil... Read more
- Published: Jan. 26, 2023
- Modified: Nov. 27, 2024
-
5.5
MEDIUMCVE-2022-42397
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious fil... Read more
- Published: Jan. 26, 2023
- Modified: Nov. 27, 2024
-
5.5
MEDIUMCVE-2022-42404
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious fil... Read more
- Published: Jan. 26, 2023
- Modified: Nov. 27, 2024
-
5.5
MEDIUMCVE-2022-42323
Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Since the fix of XSA-322 any Xenstore node owned by a remov... Read more
- Published: Nov. 01, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-42391
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious fil... Read more
- Published: Jan. 26, 2023
- Modified: Nov. 27, 2024
-
5.5
MEDIUMCVE-2022-42324
Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. The Ocaml Xenbus library takes a C uint32_t out of the ring and casts it directly to an Ocaml integer. In 64-bit Ocaml builds this is fine, but in 32-... Read more
- Published: Nov. 01, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-42342
Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati... Read more
- Published: Oct. 14, 2022
- Modified: Nov. 21, 2024