# Vulnerabilities published in 2022


- [CVE-2022-33722](https://insights.sbomify.com/CVE-2022-33722/): Information disclosure in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-33721](https://insights.sbomify.com/CVE-2022-33721/): Privilege escalation in Samsung Mobile Devices (medium 4.4)
- [CVE-2022-33720](https://insights.sbomify.com/CVE-2022-33720/): Auth bypass in Samsung Mobile Devices (low 2.4)
- [CVE-2022-3372](https://insights.sbomify.com/CVE-2022-3372/): Cross-Site Request Forgery (CSRF) in Riello UPS Netman-204 (high 8.8)
- [CVE-2022-33719](https://insights.sbomify.com/CVE-2022-33719/): Integer overflow in Samsung Mobile Devices (high 8.6)
- [CVE-2022-33718](https://insights.sbomify.com/CVE-2022-33718/): Missing authorization in Samsung Mobile Devices (medium 6.2)
- [CVE-2022-33717](https://insights.sbomify.com/CVE-2022-33717/): Memory corruption in Samsung Mobile Devices (medium 4.4)
- [CVE-2022-33716](https://insights.sbomify.com/CVE-2022-33716/): Information disclosure in Samsung Mobile Devices (low 2.3)
- [CVE-2022-33715](https://insights.sbomify.com/CVE-2022-33715/): Path traversal in Samsung Mobile Devices (medium 5.3)
- [CVE-2022-33714](https://insights.sbomify.com/CVE-2022-33714/): Missing authorization in Samsung Mobile Devices (medium 6.2)
- [CVE-2022-33713](https://insights.sbomify.com/CVE-2022-33713/): Information disclosure in Samsung Cloud (high 7.5)
- [CVE-2022-33712](https://insights.sbomify.com/CVE-2022-33712/): Information disclosure in Camera (medium 5.3)
- [CVE-2022-33711](https://insights.sbomify.com/CVE-2022-33711/): Other in Samsung USB Driver Windows Installer for Mobile Phones (medium 5.5)
- [CVE-2022-33710](https://insights.sbomify.com/CVE-2022-33710/): Privilege escalation in Galaxy Store (high 7.8)
- [CVE-2022-3371](https://insights.sbomify.com/CVE-2022-3371/): rdiffweb's lack of token name length limit can result in DoS or memory corruption (high 7.5)
- [CVE-2022-33709](https://insights.sbomify.com/CVE-2022-33709/): Privilege escalation in Galaxy Store (high 7.8)
- [CVE-2022-33708](https://insights.sbomify.com/CVE-2022-33708/): Privilege escalation in Galaxy Store (high 7.8)
- [CVE-2022-33707](https://insights.sbomify.com/CVE-2022-33707/): Information disclosure in FindMyMobile (medium 5.3)
- [CVE-2022-33706](https://insights.sbomify.com/CVE-2022-33706/): Missing authorization in Samsung Gallery (low 2.4)
- [CVE-2022-33705](https://insights.sbomify.com/CVE-2022-33705/): Missing authorization in Calendar (low 3.3)
- [CVE-2022-33704](https://insights.sbomify.com/CVE-2022-33704/): Other in Samsung Mobile Devices (high 8.5)
- [CVE-2022-33703](https://insights.sbomify.com/CVE-2022-33703/): Other in Samsung Mobile Devices (high 8.5)
- [CVE-2022-33702](https://insights.sbomify.com/CVE-2022-33702/): Missing authorization in Samsung Mobile Devices (medium 6.2)
- [CVE-2022-33701](https://insights.sbomify.com/CVE-2022-33701/): Missing authorization in Samsung Mobile Devices (low 3.3)
- [CVE-2022-33700](https://insights.sbomify.com/CVE-2022-33700/): Information disclosure in Samsung Mobile Devices (low 2.0)
- [CVE-2022-3370](https://insights.sbomify.com/CVE-2022-3370/): Use after free in Chrome (high 8.8)
- [CVE-2022-33699](https://insights.sbomify.com/CVE-2022-33699/): Information disclosure in Samsung Mobile Devices (low 2.0)
- [CVE-2022-33698](https://insights.sbomify.com/CVE-2022-33698/): Information disclosure in Samsung Mobile Devices (low 3.3)
- [CVE-2022-33697](https://insights.sbomify.com/CVE-2022-33697/): Information disclosure in Samsung Mobile Devices (low 3.3)
- [CVE-2022-33696](https://insights.sbomify.com/CVE-2022-33696/): Information disclosure in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-33695](https://insights.sbomify.com/CVE-2022-33695/): Misconfiguration in Samsung Mobile Devices (medium 5.1)
- [CVE-2022-33694](https://insights.sbomify.com/CVE-2022-33694/): Information disclosure in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-33693](https://insights.sbomify.com/CVE-2022-33693/): Information disclosure in Samsung Mobile Devices (low 2.0)
- [CVE-2022-33692](https://insights.sbomify.com/CVE-2022-33692/): Information disclosure in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-33691](https://insights.sbomify.com/CVE-2022-33691/): Race condition in Samsung Mobile Devices (medium 6.2)
- [CVE-2022-33690](https://insights.sbomify.com/CVE-2022-33690/): Path traversal in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-3369](https://insights.sbomify.com/CVE-2022-3369/): Improper handling of registry symbolic links in Bitdefender Engines (high 8.6)
- [CVE-2022-33689](https://insights.sbomify.com/CVE-2022-33689/): Missing authorization in Samsung Mobile Devices (medium 6.2)
- [CVE-2022-33688](https://insights.sbomify.com/CVE-2022-33688/): Information disclosure in Samsung Mobile Devices (low 3.3)
- [CVE-2022-33687](https://insights.sbomify.com/CVE-2022-33687/): Information disclosure in Samsung Mobile Devices (low 3.3)
- [CVE-2022-33686](https://insights.sbomify.com/CVE-2022-33686/): Information disclosure in Samsung Mobile Devices (low 2.3)
- [CVE-2022-33685](https://insights.sbomify.com/CVE-2022-33685/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-33684](https://insights.sbomify.com/CVE-2022-33684/): Apache Pulsar Disabled Certificate Validation for OAuth Client Credential Requests makes C++/Python Clients vulnerable to MITM attack (high 8.1)
- [CVE-2022-33683](https://insights.sbomify.com/CVE-2022-33683/): Disabled Certificate Validation makes Broker, Proxy Admin Clients vulnerable to MITM attack (medium 5.9)
- [CVE-2022-33682](https://insights.sbomify.com/CVE-2022-33682/): Disabled Hostname Verification makes Brokers, Proxies vulnerable to MITM attack (medium 5.9)
- [CVE-2022-33681](https://insights.sbomify.com/CVE-2022-33681/): Improper Hostname Verification in Java Client and Proxy can expose authentication data via MITM (medium 5.9)
- [CVE-2022-33680](https://insights.sbomify.com/CVE-2022-33680/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.3)
- [CVE-2022-3368](https://insights.sbomify.com/CVE-2022-3368/): Software Updater of Avira Security for Windows vulnerable to Privilege Escalation (high 7.3)
- [CVE-2022-33679](https://insights.sbomify.com/CVE-2022-33679/): Windows Kerberos Elevation of Privilege Vulnerability (high 8.1)
- [CVE-2022-33678](https://insights.sbomify.com/CVE-2022-33678/): Azure Site Recovery Remote Code Execution Vulnerability (high 7.2)
- [CVE-2022-33677](https://insights.sbomify.com/CVE-2022-33677/): Azure Site Recovery Elevation of Privilege Vulnerability (high 7.2)
- [CVE-2022-33676](https://insights.sbomify.com/CVE-2022-33676/): Azure Site Recovery Remote Code Execution Vulnerability (high 7.2)
- [CVE-2022-33675](https://insights.sbomify.com/CVE-2022-33675/): Azure Site Recovery Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-33674](https://insights.sbomify.com/CVE-2022-33674/): Azure Site Recovery Elevation of Privilege Vulnerability (high 8.3)
- [CVE-2022-33673](https://insights.sbomify.com/CVE-2022-33673/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-33672](https://insights.sbomify.com/CVE-2022-33672/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-33671](https://insights.sbomify.com/CVE-2022-33671/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-33670](https://insights.sbomify.com/CVE-2022-33670/): Windows Partition Management Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-33669](https://insights.sbomify.com/CVE-2022-33669/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-33668](https://insights.sbomify.com/CVE-2022-33668/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-33667](https://insights.sbomify.com/CVE-2022-33667/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-33666](https://insights.sbomify.com/CVE-2022-33666/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-33665](https://insights.sbomify.com/CVE-2022-33665/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-33664](https://insights.sbomify.com/CVE-2022-33664/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-33663](https://insights.sbomify.com/CVE-2022-33663/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-33662](https://insights.sbomify.com/CVE-2022-33662/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-33661](https://insights.sbomify.com/CVE-2022-33661/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-33660](https://insights.sbomify.com/CVE-2022-33660/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-3366](https://insights.sbomify.com/CVE-2022-3366/): PublishPress Capabilities < 2.5.2 - Admin+ PHP Objection Injection (high 7.2)
- [CVE-2022-33659](https://insights.sbomify.com/CVE-2022-33659/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-33658](https://insights.sbomify.com/CVE-2022-33658/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-33657](https://insights.sbomify.com/CVE-2022-33657/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-33656](https://insights.sbomify.com/CVE-2022-33656/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-33655](https://insights.sbomify.com/CVE-2022-33655/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-33654](https://insights.sbomify.com/CVE-2022-33654/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-33653](https://insights.sbomify.com/CVE-2022-33653/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-33652](https://insights.sbomify.com/CVE-2022-33652/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-33651](https://insights.sbomify.com/CVE-2022-33651/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-33650](https://insights.sbomify.com/CVE-2022-33650/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-3365](https://insights.sbomify.com/CVE-2022-3365/): Emote Interactive Remote Mouse Server command injection due to weak encoding (critical 9.8)
- [CVE-2022-33649](https://insights.sbomify.com/CVE-2022-33649/): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (critical 9.6)
- [CVE-2022-33648](https://insights.sbomify.com/CVE-2022-33648/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-33647](https://insights.sbomify.com/CVE-2022-33647/): Windows Kerberos Elevation of Privilege Vulnerability (high 8.1)
- [CVE-2022-33646](https://insights.sbomify.com/CVE-2022-33646/): Azure Batch Node Agent Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-33645](https://insights.sbomify.com/CVE-2022-33645/): Windows TCP/IP Driver Denial of Service Vulnerability (high 7.5)
- [CVE-2022-33644](https://insights.sbomify.com/CVE-2022-33644/): Xbox Live Save Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-33643](https://insights.sbomify.com/CVE-2022-33643/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-33642](https://insights.sbomify.com/CVE-2022-33642/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-33641](https://insights.sbomify.com/CVE-2022-33641/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-33640](https://insights.sbomify.com/CVE-2022-33640/): System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-3364](https://insights.sbomify.com/CVE-2022-3364/): rdiffweb's unlimited length Fullname field can lead to DoS (medium 5.3)
- [CVE-2022-33639](https://insights.sbomify.com/CVE-2022-33639/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.3)
- [CVE-2022-33638](https://insights.sbomify.com/CVE-2022-33638/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.3)
- [CVE-2022-33637](https://insights.sbomify.com/CVE-2022-33637/): Microsoft Defender for Endpoint Tampering Vulnerability (medium 6.5)
- [CVE-2022-33636](https://insights.sbomify.com/CVE-2022-33636/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (high 8.3)
- [CVE-2022-33635](https://insights.sbomify.com/CVE-2022-33635/): Windows GDI+ Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-33634](https://insights.sbomify.com/CVE-2022-33634/): Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-33633](https://insights.sbomify.com/CVE-2022-33633/): Skype for Business and Lync Remote Code Execution Vulnerability (high 7.2)
- [CVE-2022-33632](https://insights.sbomify.com/CVE-2022-33632/): Microsoft Office Security Feature Bypass Vulnerability (medium 4.7)
- [CVE-2022-33631](https://insights.sbomify.com/CVE-2022-33631/): Microsoft Excel Security Feature Bypass Vulnerability (high 7.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/300/