Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-44474 State: PUBLISHED Published: 2022-12-21T01:21:43.830Z Last Updated: 2025-04-23T16:24:28.307Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-44488 State: PUBLISHED Published: 2022-12-21T01:21:43.830Z Last Updated: 2025-04-23T16:24:20.812Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-601 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/produc
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html
CVE ID: CVE-2022-44498 State: PUBLISHED Published: 2022-12-19T10:00:14.221Z Last Updated: 2025-04-23T16:27:47.388Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Illustrator Problem Types: CWE-125 Description: Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb22-60.html
CVE ID: CVE-2022-44499 State: PUBLISHED Published: 2022-12-19T10:00:14.221Z Last Updated: 2025-04-23T16:27:40.633Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Illustrator Problem Types: CWE-125 Description: Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
CVE ID: CVE-2022-44500 State: PUBLISHED Published: 2022-12-19T10:00:14.221Z Last Updated: 2025-04-23T16:27:34.488Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Illustrator Problem Types: CWE-125 Description: Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
CVE ID: CVE-2022-44502 State: PUBLISHED Published: 2022-12-19T10:00:14.221Z Last Updated: 2025-04-23T16:27:28.764Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Illustrator Problem Types: CWE-125 Description: Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
CVE ID: CVE-2022-44510 State: PUBLISHED Published: 2022-12-23T23:03:51.372Z Last Updated: 2025-04-23T16:24:15.460Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-44512 State: PUBLISHED Published: 2024-12-18T23:28:09.769Z Last Updated: 2024-12-19T16:39:37.536Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-787 Description: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/secu
ust open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-44513 State: PUBLISHED Published: 2024-12-18T23:27:46.591Z Last Updated: 2024-12-20T17:42:08.331Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-787 Description: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/secu
CVE ID: CVE-2022-44514 State: PUBLISHED Published: 2024-12-18T23:19:57.206Z Last Updated: 2024-12-19T16:39:54.890Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/p
en a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-44515 State: PUBLISHED Published: 2024-12-18T23:23:08.432Z Last Updated: 2024-12-19T16:39:49.563Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a mal
o bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-44516 State: PUBLISHED Published: 2024-12-18T23:28:07.839Z Last Updated: 2024-12-19T16:39:43.119Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a mal
CVE ID: CVE-2022-44517 State: PUBLISHED Published: 2024-12-18T23:28:16.489Z Last Updated: 2024-12-19T16:39:25.153Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a mal
CVE ID: CVE-2022-44518 State: PUBLISHED Published: 2024-12-18T23:28:21.380Z Last Updated: 2024-12-19T16:39:19.866Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/p
CVE ID: CVE-2022-44519 State: PUBLISHED Published: 2024-12-18T23:28:15.314Z Last Updated: 2024-12-19T16:39:31.613Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichm
ue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-44520 State: PUBLISHED Published: 2024-12-18T23:27:47.809Z Last Updated: 2024-12-20T17:41:59.530Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/p
CVE ID: CVE-2022-44532 State: PUBLISHED Published: 2022-11-30T19:32:20.627Z Last Updated: 2025-04-24T14:41:17.705Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba EdgeConnect Enterprise Software Problem Types: n/a Description: An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files on the underlying operating system, including sensitive system files in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 a
iles in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt
CVE ID: CVE-2022-44533 State: PUBLISHED Published: 2022-11-30T19:33:58.609Z Last Updated: 2025-04-24T14:36:54.426Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba EdgeConnect Enterprise Software Problem Types: n/a Description: A vulnerability in the Aruba EdgeConnect Enterprise web management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below
system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt
CVE ID: CVE-2022-44534 State: PUBLISHED Published: 2023-01-03T19:47:01.504Z Last Updated: 2025-04-10T16:04:20.560Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba EdgeConnect Enterprise Orchestration Software Problem Types: n/a Description: A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Orchestrat
root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Orchestration Software version(s): Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators - Orchestrator 9.2.1.40179 and below, - Orchestrator 9.1.4.40436 and below, - Orchestrator 9.0.7.40110 and below, - Orchestrator 8.10.23.40015 and below, - Any older branches of Orchestrator not specifically mentioned. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
ot specifically mentioned. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-021.txt
CVE ID: CVE-2022-44535 State: PUBLISHED Published: 2023-01-03T19:48:21.199Z Last Updated: 2025-04-10T16:01:05.298Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba EdgeConnect Enterprise Orchestration Software Problem Types: n/a Description: A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote low-privileged authenticated users to escalate their privileges to those of an administrative user. A successful exploit could allow an attacker to achieve administrative privilege on the web-management interface leading to complete system compromise in Aruba EdgeConn
achieve administrative privilege on the web-management interface leading to complete system compromise in Aruba EdgeConnect Enterprise Orchestration Software version(s): Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators - Orchestrator 9.2.1.40179 and below, - Orchestrator 9.1.4.40436 and below, - Orchestrator 9.0.7.40110 and below, - Orchestrator 8.10.23.40015 and below, - Any older branches of Orchestrator not specifically mentioned. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
ranches of Orchestrator not specifically mentioned. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-021.txt
CVE ID: CVE-2022-44536 State: REJECTED Published: N/A Last Updated: 2023-01-05T23:17:53.307Z Description: No description available.
CVE ID: CVE-2022-44537 State: REJECTED Published: N/A Last Updated: 2023-01-05T23:18:01.040Z Description: No description available.
CVE ID: CVE-2022-44538 State: REJECTED Published: N/A Last Updated: 2023-01-05T23:18:04.231Z Description: No description available.
CVE ID: CVE-2022-44539 State: REJECTED Published: N/A Last Updated: 2023-01-05T23:18:08.742Z Description: No description available.
CVE ID: CVE-2022-44540 State: REJECTED Published: N/A Last Updated: 2023-01-05T23:18:12.456Z Description: No description available.
CVE ID: CVE-2022-44541 State: REJECTED Published: N/A Last Updated: 2023-01-05T23:18:15.421Z Description: No description available.
CVE ID: CVE-2022-44542 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T14:18:56.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of deserialized object destructor execution via a key/value pair in a hash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.gentoo.org/865631 - https://github.com/wofr06/lesspipe/releases/tag/v2.06 - https://security.gentoo.org/glsa/202211-02
CVE ID: CVE-2022-44543 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-03T13:54:03.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted groups (if there is a usergroup field on the registration form). This occurs because the usergroup.inList protection mechanism is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://typo3.org/help/security-advisories - https://typo3.org/security/advisory/typo3-ext-sa-2022-015
CVE ID: CVE-2022-44544 State: PUBLISHED Published: 2022-11-06T00:00:00.000Z Last Updated: 2025-05-02T18:37:16.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0 potentially allow a PDF export to trigger a remote shell if the site is running on Ubuntu and the flag -dSAFER is not set with Ghostscript. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.launchpad.net/mahara/+bug/1979575 - https://mahara.org/interaction/forum/topic.php?id=9198
CVE ID: CVE-2022-44546 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T18:00:59.527Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper Update of Reference Count Description: The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released. Successful exploitation of this vulnerability may cause a system restart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2022-44547 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T15:15:49.399Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: UAF vulnerability Description: The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the display service availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2022-44548 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T15:06:59.522Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Unstrict permission verification vulnerability Description: There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog box for confirming the pairing not to be displayed during Bluetooth pairing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211
com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2022-44549 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T14:38:34.187Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Geofencing API access vulnerability Description: The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to access the geofencing APIs without authorization, affecting user confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2022-44550 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T14:10:02.293Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: UAF vulnerability Description: The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
CVE ID: CVE-2022-44551 State: PUBLISHED Published: 2022-11-09T00:00:00.000Z Last Updated: 2025-05-01T14:37:34.829Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Thread security vulnerability Description: The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2022/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433