deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-20366
Published: 2022-08-11
Description: In ioctl_dpm_clk_update of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-225877745References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-190
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20367
Published: 2022-08-11
Description: In construct_transaction of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-225877459References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-190
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20368
Published: 2022-08-11
Description: Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20369
Published: 2022-08-11
Description: In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-223375145References: Upstream kernel
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html; https://source.android.com/security/bulletin/pixel/2022-08-01; https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
CVE: CVE-2022-20370
Published: 2022-08-11
Description: Product: AndroidVersions: Android kernelAndroid ID: A-215730643References: N/A
CVSS Score: 7.5 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20371
Published: 2022-08-11
Description: In dm_bow_dtr and related functions of dm-bow.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-195565510References: Upstream kernel
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-667
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20372
Published: 2022-08-11
Description: In exynos5_i2c_irq of (TBD), there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-195480799References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20373
Published: 2022-08-11
Description: In st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-208269510References: N/A
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20374
Published: 2022-08-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-20375
Published: 2022-08-11
Description: In LteRrcNrProAsnDecode of LteRrcNr_Codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-180956894References: N/A
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20376
Published: 2022-08-11
Description: In trusty_log_seq_start of trusty-log.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216130110References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-667
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20377
Published: 2022-08-11
Description: In TBD of keymaster_ipc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222339795References: N/A
CVSS Score: 6.7 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20378
Published: 2022-08-11
Description: Product: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/A
CVSS Score: 9.8 (CRITICAL)
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20379
Published: 2022-08-11
Description: In lwis_buffer_alloc of lwis_buffer.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-209436980References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20380
Published: 2022-08-11
Description: Product: AndroidVersions: Android kernelAndroid ID: A-212625740References: N/A
CVSS Score: 7.5 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20381
Published: 2022-08-11
Description: Product: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/A
CVSS Score: 9.8 (CRITICAL)
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20382
Published: 2022-08-11
Description: In (TBD) of (TBD), there is a possible out of bounds write due to kernel stack overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-214245176References: Upstream kernel
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-674
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20383
Published: 2022-08-11
Description: In AllocateInternalBuffers of g3aa_buffer_allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222408847References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20384
Published: 2022-08-11
Description: Product: AndroidVersions: Android kernelAndroid ID: A-211727306References: N/A
CVSS Score: 9.8 (CRITICAL)
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20400
Published: 2022-08-11
Description: In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-225178325References: N/A
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20401
Published: 2022-08-11
Description: In SAEMM_RetrievEPLMNList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure post-authentication with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-226446030References: N/A
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20402
Published: 2022-08-11
Description: Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A
CVSS Score: 9.8 (CRITICAL)
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20403
Published: 2022-08-11
Description: Product: AndroidVersions: Android kernelAndroid ID: A-207975764References: N/A
CVSS Score: 9.8 (CRITICAL)
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20404
Published: 2022-08-11
Description: Product: AndroidVersions: Android kernelAndroid ID: A-205714161References: N/A
CVSS Score: 7.5 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20405
Published: 2022-08-11
Description: Product: AndroidVersions: Android kernelAndroid ID: A-216363416References: N/A
CVSS Score: 9.8 (CRITICAL)
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20406
Published: 2022-08-11
Description: Product: AndroidVersions: Android kernelAndroid ID: A-184676385References: N/A
CVSS Score: 7.5 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20407
Published: 2022-08-11
Description: Product: AndroidVersions: Android kernelAndroid ID: A-210916981References: N/A
CVSS Score: 7.5 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-20408
Published: 2022-08-11
Description: Product: AndroidVersions: Android kernelAndroid ID: A-204782372References: N/A
CVSS Score: 7.5 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2022-08-01; https://source.android.com/security/bulletin/pixel/2022-08-01
CVE: CVE-2022-28750
Published: 2022-08-11
Description: Zoom On-Premise Meeting Connector Zone Controller (ZC) before version 4.8.20220419.112 fails to properly parse STUN error codes, which can result in memory corruption and could allow a malicious actor to crash the application. In versions older than 4.8.12.20211115, this vulnerability could also be leveraged to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121, CWE-787
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2022-28753
Published: 2022-08-11
Description: Zoom On-Premise Meeting Connector MMR before version 4.8[PII_REDACTED]4 contains an improper access control vulnerability. As a result, a malicious actor can join a meeting which they are authorized to join without appearing to the other participants, can admit themselves into the meeting from the waiting room, and can become host and cause other meeting disruptions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-284
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2022-28754
Published: 2022-08-11
Description: Zoom On-Premise Meeting Connector MMR before version 4.8[PII_REDACTED]4 contains an improper access control vulnerability. As a result, a malicious actor can join a meeting which they are authorized to join without appearing to the other participants, can admit themselves into the meeting from the waiting room, and can become host and cause other meeting disruptions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-284
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2022-28755
Published: 2022-08-11
Description: The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.11.0 are susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network address, leading to additional attacks including the potential for remote code execution through launching executables from arbitrary paths.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-20, CWE-601
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2022-34235
Published: 2022-08-11
Description: Adobe Premiere Elements version 2020v20 (and earlier) is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker could leverage this vulnerability to obtain admin using an existing low-privileged user. Exploitation of this issue does not require user interaction.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://helpx.adobe.com/security/products/premiere_elements/apsb22-43.html; https://helpx.adobe.com/security/products/premiere_elements/apsb22-43.html
CVE: CVE-2022-34260
Published: 2022-08-11
Description: Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb22-41.html; https://helpx.adobe.com/security/products/illustrator/apsb22-41.html
CVE: CVE-2022-34261
Published: 2022-08-11
Description: Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb22-41.html; https://helpx.adobe.com/security/products/illustrator/apsb22-41.html
CVE: CVE-2022-34262
Published: 2022-08-11
Description: Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb22-41.html; https://helpx.adobe.com/security/products/illustrator/apsb22-41.html
CVE: CVE-2022-34263
Published: 2022-08-11
Description: Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/illustrator/apsb22-41.html; https://helpx.adobe.com/security/products/illustrator/apsb22-41.html
CVE: CVE-2022-34264
Published: 2022-08-11
Description: Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/framemaker/apsb22-42.html; https://helpx.adobe.com/security/products/framemaker/apsb22-42.html
CVE: CVE-2022-35665
Published: 2022-08-11
Description: Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb22-39.html; https://helpx.adobe.com/security/products/acrobat/apsb22-39.html
CVE: CVE-2022-35666
Published: 2022-08-11
Description: Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/acrobat/apsb22-39.html; https://helpx.adobe.com/security/products/acrobat/apsb22-39.html
CVE: CVE-2022-35667
Published: 2022-08-11
Description: Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb22-39.html; https://helpx.adobe.com/security/products/acrobat/apsb22-39.html
CVE: CVE-2022-35668
Published: 2022-08-11
Description: Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an Improper Input Validation vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://helpx.adobe.com/security/products/acrobat/apsb22-39.html; https://helpx.adobe.com/security/products/acrobat/apsb22-39.html
CVE: CVE-2022-35670
Published: 2022-08-11
Description: Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb22-39.html; https://helpx.adobe.com/security/products/acrobat/apsb22-39.html
CVE: CVE-2022-35671
Published: 2022-08-11
Description: Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb22-39.html; https://helpx.adobe.com/security/products/acrobat/apsb22-39.html
CVE: CVE-2022-35673
Published: 2022-08-11
Description: Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/framemaker/apsb22-42.html; https://helpx.adobe.com/security/products/framemaker/apsb22-42.html
CVE: CVE-2022-35674
Published: 2022-08-11
Description: Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/framemaker/apsb22-42.html; https://helpx.adobe.com/security/products/framemaker/apsb22-42.html
CVE: CVE-2022-35675
Published: 2022-08-11
Description: Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/framemaker/apsb22-42.html; https://helpx.adobe.com/security/products/framemaker/apsb22-42.html
CVE: CVE-2022-35676
Published: 2022-08-11
Description: Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://helpx.adobe.com/security/products/framemaker/apsb22-42.html; https://helpx.adobe.com/security/products/framemaker/apsb22-42.html