# Vulnerabilities published in 2022


- [CVE-2022-22070](https://insights.sbomify.com/CVE-2022-22070/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8)
- [CVE-2022-2207](https://insights.sbomify.com/CVE-2022-2207/): Heap-based Buffer Overflow in vim/vim (high 7.8)
- [CVE-2022-22069](https://insights.sbomify.com/CVE-2022-22069/): Weak cryptography in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 7.7)
- [CVE-2022-22068](https://insights.sbomify.com/CVE-2022-22068/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)
- [CVE-2022-22067](https://insights.sbomify.com/CVE-2022-22067/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile (high 7.5)
- [CVE-2022-22066](https://insights.sbomify.com/CVE-2022-22066/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)
- [CVE-2022-22065](https://insights.sbomify.com/CVE-2022-22065/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.5)
- [CVE-2022-22064](https://insights.sbomify.com/CVE-2022-22064/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.5)
- [CVE-2022-22063](https://insights.sbomify.com/CVE-2022-22063/): Memory corruption in Core (high 8.4)
- [CVE-2022-22062](https://insights.sbomify.com/CVE-2022-22062/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 8.2)
- [CVE-2022-22061](https://insights.sbomify.com/CVE-2022-22061/): Memory corruption in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile (high 7.8)
- [CVE-2022-22060](https://insights.sbomify.com/CVE-2022-22060/): Reachable Assertion in Modem (high 7.5)
- [CVE-2022-2206](https://insights.sbomify.com/CVE-2022-2206/): Out-of-bounds Read in vim/vim (high 7.8)
- [CVE-2022-22059](https://insights.sbomify.com/CVE-2022-22059/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 8.4)
- [CVE-2022-22058](https://insights.sbomify.com/CVE-2022-22058/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)
- [CVE-2022-22057](https://insights.sbomify.com/CVE-2022-22057/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 8.4)
- [CVE-2022-22056](https://insights.sbomify.com/CVE-2022-22056/): Le-yan Co., Ltd. dental management system - Hard-coded Credentials (critical 9.8)
- [CVE-2022-22055](https://insights.sbomify.com/CVE-2022-22055/): Le-yan Co., Ltd. dental management system - SQL Injection (critical 9.8)
- [CVE-2022-22054](https://insights.sbomify.com/CVE-2022-22054/): ASUS RT-AX56U - Path Traversal (medium 6.5)
- [CVE-2022-22050](https://insights.sbomify.com/CVE-2022-22050/): Windows Fax Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-22049](https://insights.sbomify.com/CVE-2022-22049/): Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-22048](https://insights.sbomify.com/CVE-2022-22048/): BitLocker Security Feature Bypass Vulnerability (medium 6.1)
- [CVE-2022-22047](https://insights.sbomify.com/CVE-2022-22047/): Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-22045](https://insights.sbomify.com/CVE-2022-22045/): Windows.Devices.Picker.dll Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-22043](https://insights.sbomify.com/CVE-2022-22043/): Windows Fast FAT File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-22042](https://insights.sbomify.com/CVE-2022-22042/): Windows Hyper-V Information Disclosure Vulnerability (medium 6.5)
- [CVE-2022-22041](https://insights.sbomify.com/CVE-2022-22041/): Windows Print Spooler Elevation of Privilege Vulnerability (medium 6.8)
- [CVE-2022-22040](https://insights.sbomify.com/CVE-2022-22040/): Internet Information Services Dynamic Compression Module Denial of Service Vulnerability (high 7.3)
- [CVE-2022-22039](https://insights.sbomify.com/CVE-2022-22039/): Windows Network File System Remote Code Execution Vulnerability (high 7.5)
- [CVE-2022-22038](https://insights.sbomify.com/CVE-2022-22038/): Remote Procedure Call Runtime Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-22037](https://insights.sbomify.com/CVE-2022-22037/): Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2022-22036](https://insights.sbomify.com/CVE-2022-22036/): Performance Counters for Windows Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-22035](https://insights.sbomify.com/CVE-2022-22035/): Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-22034](https://insights.sbomify.com/CVE-2022-22034/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-22031](https://insights.sbomify.com/CVE-2022-22031/): Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-22029](https://insights.sbomify.com/CVE-2022-22029/): Windows Network File System Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-22028](https://insights.sbomify.com/CVE-2022-22028/): Windows Network File System Information Disclosure Vulnerability (medium 5.9)
- [CVE-2022-22027](https://insights.sbomify.com/CVE-2022-22027/): Windows Fax Service Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-22026](https://insights.sbomify.com/CVE-2022-22026/): Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2022-22025](https://insights.sbomify.com/CVE-2022-22025/): Windows Internet Information Services Cachuri Module Denial of Service Vulnerability (high 7.5)
- [CVE-2022-22024](https://insights.sbomify.com/CVE-2022-22024/): Windows Fax Service Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-22023](https://insights.sbomify.com/CVE-2022-22023/): Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability (medium 6.6)
- [CVE-2022-22022](https://insights.sbomify.com/CVE-2022-22022/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2022-22021](https://insights.sbomify.com/CVE-2022-22021/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (high 8.3)
- [CVE-2022-22019](https://insights.sbomify.com/CVE-2022-22019/): Remote Procedure Call Runtime Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-22018](https://insights.sbomify.com/CVE-2022-22018/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-22017](https://insights.sbomify.com/CVE-2022-22017/): Remote Desktop Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-22016](https://insights.sbomify.com/CVE-2022-22016/): Windows PlayToManager Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-22015](https://insights.sbomify.com/CVE-2022-22015/): Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability (medium 6.5)
- [CVE-2022-22014](https://insights.sbomify.com/CVE-2022-22014/): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-22013](https://insights.sbomify.com/CVE-2022-22013/): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-22012](https://insights.sbomify.com/CVE-2022-22012/): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2022-22011](https://insights.sbomify.com/CVE-2022-22011/): Windows Graphics Component Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-22010](https://insights.sbomify.com/CVE-2022-22010/): Media Foundation Information Disclosure Vulnerability (medium 4.4)
- [CVE-2022-22009](https://insights.sbomify.com/CVE-2022-22009/): Windows Hyper-V Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-22008](https://insights.sbomify.com/CVE-2022-22008/): Windows Hyper-V Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-22007](https://insights.sbomify.com/CVE-2022-22007/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-22006](https://insights.sbomify.com/CVE-2022-22006/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-22005](https://insights.sbomify.com/CVE-2022-22005/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-22004](https://insights.sbomify.com/CVE-2022-22004/): Microsoft Office ClickToRun Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-22003](https://insights.sbomify.com/CVE-2022-22003/): Microsoft Office Graphics Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-22002](https://insights.sbomify.com/CVE-2022-22002/): Windows User Account Profile Picture Denial of Service Vulnerability (medium 5.5)
- [CVE-2022-22001](https://insights.sbomify.com/CVE-2022-22001/): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-22000](https://insights.sbomify.com/CVE-2022-22000/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-2200](https://insights.sbomify.com/CVE-2022-2200/): Code injection in Firefox (high 8.8)
- [CVE-2022-21999](https://insights.sbomify.com/CVE-2022-21999/): Microsoft Windows Print Spooler Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-21998](https://insights.sbomify.com/CVE-2022-21998/): Windows Common Log File System Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-21997](https://insights.sbomify.com/CVE-2022-21997/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2022-21996](https://insights.sbomify.com/CVE-2022-21996/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-21995](https://insights.sbomify.com/CVE-2022-21995/): Windows Hyper-V Remote Code Execution Vulnerability (high 7.9)
- [CVE-2022-21994](https://insights.sbomify.com/CVE-2022-21994/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-21993](https://insights.sbomify.com/CVE-2022-21993/): Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability (high 7.5)
- [CVE-2022-21992](https://insights.sbomify.com/CVE-2022-21992/): Windows Mobile Device Management Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-21991](https://insights.sbomify.com/CVE-2022-21991/): Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-21990](https://insights.sbomify.com/CVE-2022-21990/): Remote Desktop Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-2199](https://insights.sbomify.com/CVE-2022-2199/): ICSA-22-200-01 MiCODUS MV720 GPS tracker Cross-site Scripting (high 7.5)
- [CVE-2022-21989](https://insights.sbomify.com/CVE-2022-21989/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-21988](https://insights.sbomify.com/CVE-2022-21988/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-21987](https://insights.sbomify.com/CVE-2022-21987/): Microsoft SharePoint Server Spoofing Vulnerability (high 8.0)
- [CVE-2022-21986](https://insights.sbomify.com/CVE-2022-21986/): .NET Denial of Service Vulnerability (high 7.5)
- [CVE-2022-21985](https://insights.sbomify.com/CVE-2022-21985/): Windows Remote Access Connection Manager Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-21984](https://insights.sbomify.com/CVE-2022-21984/): Windows DNS Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-21983](https://insights.sbomify.com/CVE-2022-21983/): Win32 Stream Enumeration Remote Code Execution Vulnerability (high 7.5)
- [CVE-2022-21981](https://insights.sbomify.com/CVE-2022-21981/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-21980](https://insights.sbomify.com/CVE-2022-21980/): Microsoft Exchange Server Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2022-2198](https://insights.sbomify.com/CVE-2022-2198/): WPQA < 5.7 - Subscriber+ Private Message Disclosure via IDOR (medium 4.3)
- [CVE-2022-21979](https://insights.sbomify.com/CVE-2022-21979/): Microsoft Exchange Server Information Disclosure Vulnerability (medium 4.8)
- [CVE-2022-21978](https://insights.sbomify.com/CVE-2022-21978/): Microsoft Exchange Server Elevation of Privilege Vulnerability (high 8.2)
- [CVE-2022-21977](https://insights.sbomify.com/CVE-2022-21977/): Media Foundation Information Disclosure Vulnerability (low 3.3)
- [CVE-2022-21975](https://insights.sbomify.com/CVE-2022-21975/): Windows Hyper-V Denial of Service Vulnerability (medium 4.7)
- [CVE-2022-21974](https://insights.sbomify.com/CVE-2022-21974/): Roaming Security Rights Management Services Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-21973](https://insights.sbomify.com/CVE-2022-21973/): Windows Media Center Update Denial of Service Vulnerability (medium 5.5)
- [CVE-2022-21972](https://insights.sbomify.com/CVE-2022-21972/): Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-21971](https://insights.sbomify.com/CVE-2022-21971/): Microsoft Windows Runtime Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2022-21970](https://insights.sbomify.com/CVE-2022-21970/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (medium 6.1)
- [CVE-2022-2197](https://insights.sbomify.com/CVE-2022-2197/): Exemys RME1 (critical 9.8)
- [CVE-2022-21969](https://insights.sbomify.com/CVE-2022-21969/): Microsoft Exchange Server Remote Code Execution Vulnerability (critical 9.0)
- [CVE-2022-21968](https://insights.sbomify.com/CVE-2022-21968/): Microsoft SharePoint Server Security Feature Bypass Vulnerability (medium 4.3)
- [CVE-2022-21967](https://insights.sbomify.com/CVE-2022-21967/): Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-21965](https://insights.sbomify.com/CVE-2022-21965/): Microsoft Teams Denial of Service Vulnerability (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/395/