Vulnerabilities (CVE)

Filtered by NVD-CWE-noinfo
Total 36333 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-42541 1 Google 1 Android 2026-06-17 N/A 9.8 CRITICAL
Remote code execution
CVE-2022-42540 1 Google 1 Android 2026-06-17 N/A 9.8 CRITICAL
Elevation of privilege
CVE-2022-42539 1 Google 1 Android 2026-06-17 N/A 7.5 HIGH
Information disclosure
CVE-2022-42538 1 Google 1 Android 2026-06-17 N/A 9.8 CRITICAL
Elevation of privilege
CVE-2022-42537 1 Google 1 Android 2026-06-17 N/A 9.8 CRITICAL
Remote code execution
CVE-2022-42536 1 Google 1 Android 2026-06-17 N/A 9.8 CRITICAL
Remote code execution
CVE-2022-42529 1 Google 1 Android 2026-06-17 N/A 9.8 CRITICAL
Product: AndroidVersions: Android kernelAndroid ID: A-235292841References: N/A
CVE-2022-42528 1 Google 1 Android 2026-06-17 N/A 5.5 MEDIUM
In ffa_mrd_prot of shared_mem.c, there is a possible ID due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242203672References: N/A
CVE-2022-42527 1 Google 1 Android 2026-06-17 N/A 7.5 HIGH
In cd_SsParseMsg of cd_SsCodec.c, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-244448906References: N/A
CVE-2022-42465 1 Intel 1 One Boot Flash Update 2026-06-17 N/A 7.2 HIGH
Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2022-42457 1 Generex 2 Cs141, Cs141 Firmware 2026-06-17 N/A 9.1 CRITICAL
Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches run_update in /usr/bin/gxserve-update.sh (e.g., command execution can occur via a reverse shell installed by install.sh).
CVE-2022-42455 1 Asus 1 Armoury Crate 2026-06-17 N/A 7.8 HIGH
ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and shipped with multiple ASUS software products, contains multiple IOCTL handlers that provide raw read and write access to port I/O and MSRs via unprivileged IOCTL calls. Local users can gain privileges.
CVE-2022-42445 1 Hcltechsw 1 Hcl Launch 2026-06-17 N/A 4.9 MEDIUM
HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches.
CVE-2022-42443 1 Ibm 2 Trusteer Android Sdk For Mobile, Trusteer Ios Sdk For Mobile 2026-06-17 N/A 2.2 LOW
An undisclosed issue in Trusteer iOS SDK for mobile versions prior to 5.7 and Trusteer Android SDK for mobile versions prior to 5.7 may allow uploading of files. IBM X-Force ID: 238535.
CVE-2022-42442 2 Ibm, Redhat 2 Robotic Process Automation For Cloud Pak, Openshift Container Platform 2026-06-17 N/A 3.3 LOW
IBM Robotic Process Automation for Cloud Pak 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to exposure of the first tenant owner e-mail address to users with access to the container platform. IBM X-Force ID: 238214.
CVE-2022-42436 4 Ibm, Linux, Microsoft and 1 more 7 Aix, I, Linux On Ibm Z and 4 more 2026-06-17 N/A 4.0 MEDIUM
IBM MQ 8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0 Managed File Transfer could allow a local user to obtain sensitive information from diagnostic files. IBM X-Force ID: 238206.
CVE-2022-42336 1 Xen 1 Xen 2026-06-17 N/A 3.3 LOW
Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, as the setting is shared between threads. Logic was introduced to keep track of how many threads require SSBD active in order to coordinate it, such logic relies on using a per-core counter of threads that have SSBD active. When running on the mentioned hardware, it's possible for a guest to under or overflow the thread counter, because each write to VIRT_SPEC_CTRL.SSBD by the guest gets propagated to the helper that does the per-core active accounting. Underflowing the counter causes the value to get saturated, and thus attempts for guests running on the same core to set SSBD won't have effect because the hypervisor assumes it's already active.
CVE-2022-42331 2 Fedoraproject, Xen 2 Fedora, Xen 2026-06-17 N/A 5.5 MEDIUM
x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variety of speculative attacks.
CVE-2022-42330 1 Xen 1 Xen 2026-06-17 N/A 7.5 HIGH
Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for performing a kexec) the libxl based Xen toolstack will normally perform a XS_RELEASE Xenstore operation. Due to a bug in xenstored this can result in a crash of xenstored. Any other use of XS_RELEASE will have the same impact.
CVE-2022-42327 2 Fedoraproject, Xen 2 Fedora, Xen 2026-06-17 N/A 7.1 HIGH
x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by moving the local APIC out of xAPIC mode. Access to this shared page bypasses the expected isolation that should exist between two guests.