deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-29614
Published: 2022-06-14
Description: SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, SAPHOSTAGENT 7.22, - on Unix systems, s-bit helper program sapuxuserchk, can be abused physically resulting in a privilege escalation of an attacker leading to low impact on confidentiality and integrity, but a profound impact on availability.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-269
References: http://packetstormsecurity.com/files/168409/SAP-SAPControl-Web-Service-Interface-Local-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2022/Sep/18; https://launchpad.support.sap.com/#/notes/3158619
CVE: CVE-2022-29615
Published: 2022-06-14
Description: SAP NetWeaver Developer Studio (NWDS) - version 7.50, is based on Eclipse, which contains the logging framework log4j in version 1.x. The application's confidentiality and integrity could have a low impact due to the vulnerabilities associated with version 1.x.
CVSS Score: 3.4 (LOW)
CWE: CWE-502
References: https://launchpad.support.sap.com/#/notes/3202846; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3202846
CVE: CVE-2022-29618
Published: 2022-06-14
Description: Due to insufficient input validation, SAP NetWeaver Development Infrastructure (Design Time Repository) - versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to inject script into the URL and execute code in the user’s browser. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3197927; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3197927
CVE: CVE-2022-31589
Published: 2022-06-14
Description: Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://launchpad.support.sap.com/#/notes/3203065; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3203065
CVE: CVE-2022-31590
Published: 2022-06-14
Description: SAP PowerDesigner Proxy - version 16.7, allows an attacker with low privileges and has local access, with the ability to work around system’s root disk access restrictions to Write/Create a program file on system disk root path, which could then be executed with elevated privileges of the application during application start up or reboot, potentially compromising Confidentiality, Integrity and Availability of the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://launchpad.support.sap.com/#/notes/3197005; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3197005
CVE: CVE-2022-31594
Published: 2022-06-14
Description: A highly privileged user can exploit SUID-root program to escalate his privileges to root on a local Unix system.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-269
References: https://launchpad.support.sap.com/#/notes/3155571; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3155571
CVE: CVE-2022-31595
Published: 2022-06-14
Description: SAP Financial Consolidation - version 1010,�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://launchpad.support.sap.com/#/notes/3158815; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3158815
CVE: CVE-2022-32235
Published: 2022-06-14
Description: When a user opens manipulated AutoCAD (.dwg, TeighaTranslator.exe) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3206271; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3206271
CVE: CVE-2022-31059
Published: 2022-06-14
Description: Discourse Calendar is a calendar plugin for Discourse, an open-source messaging app. Prior to version 1.0.1, parsing and rendering of Event names can be susceptible to cross-site scripting (XSS) attacks. This vulnerability only affects sites which have modified or disabled Discourse’s default Content Security Policy. This issue is patched in version 1.0.1 of the Discourse Calendar plugin. As a workaround, ensure that the Content Security Policy is enabled, and has not been modified in a way which would make it more vulnerable to XSS attacks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/discourse/discourse-calendar/commit/2719b9e81994e961bf8c4e12b4556dc9777dd62f; https://github.com/discourse/discourse-calendar/pull/280; https://github.com/discourse/discourse-calendar/security/advisories/GHSA-c783-x9vm-xxp5
CVE: CVE-2022-32236
Published: 2022-06-14
Description: When a user opens manipulated Windows Bitmap (.bmp, 2d.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3206271; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3206271
CVE: CVE-2022-32237
Published: 2022-06-14
Description: When a user opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3206271; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3206271
CVE: CVE-2022-32238
Published: 2022-06-14
Description: When a user opens manipulated Encapsulated Post Script (.eps, ai.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://launchpad.support.sap.com/#/notes/3206271; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3206271
CVE: CVE-2022-32239
Published: 2022-06-14
Description: When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3206271; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3206271
CVE: CVE-2022-29241
Published: 2022-06-14
Description: Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of `root_dir` that contains the starting user's home directory, then the underlying REST API can be used to leak the access token assigned at start time by guessing/brute forcing the PID of the jupyter server. While this requires an authenticated user session, this URL can be used from a cross-site scripting payload or from a hooked or otherwise compromised browser to leak this access token to a malicious third party. This token can be used along with the REST API to interact with Jupyter services/notebooks such as modifying or overwriting critical files, such as .bashrc or .ssh/authorized_keys, allowing a malicious user to read potentially sensitive data and possibly gain control of the impacted system. This issue is patched in version 1.17.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-q874-g24w-4q9g; https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-q874-g24w-4q9g
CVE: CVE-2022-31046
Published: 2022-06-14
Description: TYPO3 is an open source web content management system. Prior to versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, the export functionality fails to limit the result set to allowed columns of a particular database table. This way, authenticated users can export internal details of database tables they already have access to. TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, 11.5.11 fix the problem described above. In order to address this issue, access to mentioned export functionality is completely denied for regular backend users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-319
References: https://github.com/TYPO3/typo3/commit/7447a3d1283017d2ee08737a7972c720001a93e9; https://github.com/TYPO3/typo3/security/advisories/GHSA-8gmv-9hwg-w89g; https://typo3.org/security/advisory/typo3-core-sa-2022-001
CVE: CVE-2022-31047
Published: 2022-06-14
Description: TYPO3 is an open source web content management system. Prior to versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, system internal credentials or keys (e.g. database credentials) can be logged as plaintext in exception handlers, when logging the complete exception stack trace. TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, 11.5.11 contain a fix for the problem.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532, CWE-209
References: https://github.com/TYPO3/typo3/commit/c93ea692e7dfef03b7c50fe[PII_REDACTED]bee4d6a; https://github.com/TYPO3/typo3/security/advisories/GHSA-fh99-4pgr-8j99; https://typo3.org/security/advisory/typo3-core-sa-2022-002
CVE: CVE-2022-31048
Published: 2022-06-14
Description: TYPO3 is an open source web content management system. Prior to versions 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed to exploit this vulnerability. TYPO3 versions 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11 contain a fix for the problem.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/TYPO3/typo3/commit/6f2554dc4ea0b670fd5599c54fd788d4db96c4a0; https://github.com/TYPO3/typo3/security/advisories/GHSA-3r95-23jp-mhvg; https://typo3.org/security/advisory/typo3-core-sa-2022-003
CVE: CVE-2022-31049
Published: 2022-06-14
Description: TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, user submitted content was used without being properly encoded in HTML emails sent to users. The actually affected components were mail clients used to view those messages. TYPO3 versions 9.5.34 ELTS, 10.4.29, and 11.5.11 contain a fix for the problem.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/TYPO3/typo3/commit/da611775f92102d[PII_REDACTED]f4c79606c8a445d; https://github.com/TYPO3/typo3/security/advisories/GHSA-h4mx-xv96-2jgm; https://typo3.org/security/advisory/typo3-core-sa-2022-004
CVE: CVE-2022-31050
Published: 2022-06-14
Description: TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, Admin Tool sessions initiated via the TYPO3 backend user interface had not been revoked even if the corresponding user account was degraded to lower permissions or disabled completely. This way, sessions in the admin tool theoretically could have been prolonged without any limit. TYPO3 versions 9.5.34 ELTS, 10.4.29, and 11.5.11 contain a fix for the problem.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-613
References: https://github.com/TYPO3/typo3/commit/[PII_REDACTED]12290c135ebecc91768a67f83a3a4d; https://github.com/TYPO3/typo3/security/advisories/GHSA-wwjw-r3gj-39fq; https://typo3.org/security/advisory/typo3-core-sa-2022-005
CVE: CVE-2022-31060
Published: 2022-06-14
Description: Discourse is an open-source discussion platform. Prior to version 2.8.4 in the `stable` branch and version `2.9.0.beta5` in the `beta` and `tests-passed` branches, banner topic data is exposed on login-required sites. This issue is patched in version 2.8.4 in the `stable` branch and version `2.9.0.beta5` in the `beta` and `tests-passed` branches of Discourse. As a workaround, one may disable banners.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/discourse/discourse/commit/ae6a9079436fb9b20fd051d25fb6d8027f0ec59a; https://github.com/discourse/discourse/pull/17071; https://github.com/discourse/discourse/security/advisories/GHSA-5f4f-35fx-gqhq
CVE: CVE-2022-32353
Published: 2022-06-14
Description: Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/manage_field_order.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/product-show-room-site/SQLi-1.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/product-show-room-site/SQLi-1.md
CVE: CVE-2022-32354
Published: 2022-06-14
Description: Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=user/manage_user&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/product-show-room-site/SQLi-2.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/product-show-room-site/SQLi-2.md
CVE: CVE-2022-32355
Published: 2022-06-14
Description: Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/view_product&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/product-show-room-site/SQLi-6.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/product-show-room-site/SQLi-6.md
CVE: CVE-2022-32358
Published: 2022-06-14
Description: Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_inquiry.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/product-show-room-site/SQLi-5.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/product-show-room-site/SQLi-5.md
CVE: CVE-2022-32359
Published: 2022-06-14
Description: Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_category.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/product-show-room-site/SQLi-3.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/product-show-room-site/SQLi-3.md
CVE: CVE-2022-32362
Published: 2022-06-14
Description: Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/manage_category.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/product-show-room-site/SQLi-9.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/product-show-room-site/SQLi-9.md
CVE: CVE-2022-32363
Published: 2022-06-14
Description: Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/view_category.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/product-show-room-site/SQLi-8.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/product-show-room-site/SQLi-8.md
CVE: CVE-2022-31066
Published: 2022-06-14
Description: EdgeX Foundry is an open source project for building a common open framework for Internet of Things edge computing. Prior to version 2.1.1, the /api/v2/config endpoint exposes message bus credentials to local unauthenticated users. In security-enabled mode, message bus credentials are supposed to be kept in the EdgeX secret store and require authentication to access. This vulnerability bypasses the access controls on message bus credentials when running in security-enabled mode. (No credentials are required when running in security-disabled mode.) As a result, attackers could intercept data or inject fake data into the EdgeX message bus. Users should upgrade to EdgeXFoundry Kamakura release (2.2.0) or to the June 2022 EdgeXFoundry LTS Jakarta release (2.1.1) to receive a patch. More information about which go modules, docker containers, and snaps contain patches is available in the GitHub Security Advisory. There are currently no known workarounds for this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://github.com/edgexfoundry/device-sdk-go/pull/1161; https://github.com/edgexfoundry/edgex-go/pull/4016; https://github.com/edgexfoundry/edgex-go/security/advisories/GHSA-g63h-q855-vp3q
CVE: CVE-2022-32230
Published: 2022-06-14
Description: Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD) crash of the Windows kernel. For most systems, this attack requires authentication, except in the special case of Windows Domain Controllers, where unauthenticated users can always open named pipes as long as they can establish an SMB session. Typically, after the BSOD, the victim SMBv3 server will reboot.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://github.com/zeroSteiner/metasploit-framework/blob/feat/mod/cve-2022-32230/modules/auxiliary/dos/smb/smb_filenormalizednameinformation.rb; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-32230; https://support.microsoft.com/en-us/topic/may-10-2022-kb5013942-os-builds-19042-1706-19043-1706-and-19044-1706-60b51119-85be-4a34-9e21-8954f6749504
CVE: CVE-2022-32240
Published: 2022-06-14
Description: When a user opens manipulated Jupiter Tesselation (.jt, JTReader.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3206271; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3206271
CVE: CVE-2022-32241
Published: 2022-06-14
Description: When a user opens manipulated Portable Document Format (.pdf, PDFView.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3206271; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3206271
CVE: CVE-2022-32242
Published: 2022-06-14
Description: When a user opens manipulated Radiance Picture (.hdr, hdr.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3206271; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3206271
CVE: CVE-2022-32243
Published: 2022-06-14
Description: When a user opens manipulated Scalable Vector Graphics (.svg, svg.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3206271; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3206271
CVE: CVE-2022-1958
Published: 2022-06-15
Description: A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-201960.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284
References: https://vuldb.com/?ctiid.201960; https://vuldb.com/?id.201960; https://www.filecloud.com/supportdocs/fcdoc/2v/server/security-advisories/2022-security-advisories/advisory-2022-06-01-potential-unauthorized-data-access-when-using-network-folders-with-ntfs-permissions
CVE: CVE-2021-40212
Published: 2022-06-15
Description: An exploitable out-of-bounds write vulnerability in PotPlayer 1.7.21523 build 210729 may lead to code execution, information disclosure, and denial of service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://a-man-in-the-cookie.blogspot.com; https://a-man-in-the-cookie.blogspot.com/2021/08/PotPlayer-Critical-Memory-Access-Violation-Vulnerability.html; https://a-man-in-the-cookie.blogspot.com
CVE: CVE-2021-41413
Published: 2022-06-15
Description: ok-file-formats master 2021-9-12 is affected by a buffer overflow in ok_jpg_convert_data_unit_grayscale and ok_jpg_convert_YCbCr_to_RGB.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/brackeen/ok-file-formats; https://github.com/brackeen/ok-file-formats/issues/20; https://github.com/brackeen/ok-file-formats
CVE: CVE-2021-39691
Published: 2022-06-15
Description: In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-157929241
CVSS Score: 7.3 (HIGH)
CWE: CWE-1021
References: https://source.android.com/security/bulletin/2022-06-01; https://source.android.com/security/bulletin/2022-06-01
CVE: CVE-2022-20123
Published: 2022-06-15
Description: In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-221852424
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2022-06-01; https://source.android.com/security/bulletin/2022-06-01
CVE: CVE-2022-20124
Published: 2022-06-15
Description: In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded applications for other users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-170646036
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/2022-12-01; https://source.android.com/security/bulletin/2022-12-01