# Vulnerabilities published in 2022


- [CVE-2022-21866](https://insights.sbomify.com/CVE-2022-21866/): Windows System Launcher Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-21865](https://insights.sbomify.com/CVE-2022-21865/): Connected Devices Platform Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-21864](https://insights.sbomify.com/CVE-2022-21864/): Windows UI Immersive Server API Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-21863](https://insights.sbomify.com/CVE-2022-21863/): Windows StateRepository API Server file Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-21862](https://insights.sbomify.com/CVE-2022-21862/): Windows Application Model Core API Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-21861](https://insights.sbomify.com/CVE-2022-21861/): Task Flow Data Engine Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-21860](https://insights.sbomify.com/CVE-2022-21860/): Windows AppContracts API Server Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-2186](https://insights.sbomify.com/CVE-2022-2186/): Simple Post Notes < 1.7.6 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-21859](https://insights.sbomify.com/CVE-2022-21859/): Windows Accounts Control Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-21858](https://insights.sbomify.com/CVE-2022-21858/): Windows Bind Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-21857](https://insights.sbomify.com/CVE-2022-21857/): Active Directory Domain Services Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2022-21855](https://insights.sbomify.com/CVE-2022-21855/): Microsoft Exchange Server Remote Code Execution Vulnerability (critical 9.0)
- [CVE-2022-21852](https://insights.sbomify.com/CVE-2022-21852/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-21851](https://insights.sbomify.com/CVE-2022-21851/): Remote Desktop Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-21850](https://insights.sbomify.com/CVE-2022-21850/): Remote Desktop Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-2185](https://insights.sbomify.com/CVE-2022-2185/): Command injection in GitLab (critical 9.9)
- [CVE-2022-21849](https://insights.sbomify.com/CVE-2022-21849/): Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2022-21848](https://insights.sbomify.com/CVE-2022-21848/): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (high 7.5)
- [CVE-2022-21847](https://insights.sbomify.com/CVE-2022-21847/): Windows Hyper-V Denial of Service Vulnerability (medium 6.5)
- [CVE-2022-21846](https://insights.sbomify.com/CVE-2022-21846/): Microsoft Exchange Server Remote Code Execution Vulnerability (critical 9.0)
- [CVE-2022-21845](https://insights.sbomify.com/CVE-2022-21845/): Windows Kernel Information Disclosure Vulnerability (medium 4.7)
- [CVE-2022-21844](https://insights.sbomify.com/CVE-2022-21844/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-21843](https://insights.sbomify.com/CVE-2022-21843/): Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability (high 7.5)
- [CVE-2022-21842](https://insights.sbomify.com/CVE-2022-21842/): Microsoft Word Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-21841](https://insights.sbomify.com/CVE-2022-21841/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-21840](https://insights.sbomify.com/CVE-2022-21840/): Microsoft Office Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-2184](https://insights.sbomify.com/CVE-2022-2184/): CAPTCHA 4WP < 7.1.0 - Local File Inclusion via CSRF (high 8.8)
- [CVE-2022-21839](https://insights.sbomify.com/CVE-2022-21839/): Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability (medium 6.1)
- [CVE-2022-21838](https://insights.sbomify.com/CVE-2022-21838/): Windows Cleanup Manager Elevation of Privilege Vulnerability (medium 5.5)
- [CVE-2022-21837](https://insights.sbomify.com/CVE-2022-21837/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.3)
- [CVE-2022-21836](https://insights.sbomify.com/CVE-2022-21836/): Windows Certificate Spoofing Vulnerability (high 7.8)
- [CVE-2022-21835](https://insights.sbomify.com/CVE-2022-21835/): Microsoft Cryptographic Services Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-21834](https://insights.sbomify.com/CVE-2022-21834/): Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-21833](https://insights.sbomify.com/CVE-2022-21833/): Virtual Machine IDE Drive Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-21831](https://insights.sbomify.com/CVE-2022-21831/): Possible code injection vulnerability in Rails / Active Storage (critical 9.8)
- [CVE-2022-21830](https://insights.sbomify.com/CVE-2022-21830/): Cross-site Scripting in @rocket.chat/livechat (medium 6.1)
- [CVE-2022-2183](https://insights.sbomify.com/CVE-2022-2183/): Out-of-bounds Read in vim/vim (high 7.8)
- [CVE-2022-21829](https://insights.sbomify.com/CVE-2022-21829/): Code injection in concrete CMS (critical 9.8)
- [CVE-2022-21828](https://insights.sbomify.com/CVE-2022-21828/): Deserialization in Ivanti Incapptic Connect (high 7.2)
- [CVE-2022-21827](https://insights.sbomify.com/CVE-2022-21827/): Privilege escalation in Citrix Gateway Windows Plugin (high 7.1)
- [CVE-2022-21826](https://insights.sbomify.com/CVE-2022-21826/): Other in Pulse Connect Secure VPN Server (medium 5.4)
- [CVE-2022-21825](https://insights.sbomify.com/CVE-2022-21825/): Privilege escalation in Citrix Workspace App for Linux (high 7.8)
- [CVE-2022-21824](https://insights.sbomify.com/CVE-2022-21824/): Code injection in Node (high 8.2)
- [CVE-2022-21823](https://insights.sbomify.com/CVE-2022-21823/): Information disclosure in Ivanti Workspace Control (medium 5.5)
- [CVE-2022-21822](https://insights.sbomify.com/CVE-2022-21822/): Allocation of Resources Without Limits or Throttling in nvflare (high 7.5)
- [CVE-2022-21821](https://insights.sbomify.com/CVE-2022-21821/): Integer overflow in NVIDIA CUDA Toolkit (high 7.8)
- [CVE-2022-21820](https://insights.sbomify.com/CVE-2022-21820/): Memory corruption in NVIDIA Data Center GPU Manager (medium 6.3)
- [CVE-2022-2182](https://insights.sbomify.com/CVE-2022-2182/): Heap-based Buffer Overflow in vim/vim (high 7.8)
- [CVE-2022-21819](https://insights.sbomify.com/CVE-2022-21819/): Misconfiguration in Jetson Nano, Jetson Nano 2GB (high 7.6)
- [CVE-2022-21818](https://insights.sbomify.com/CVE-2022-21818/): Information disclosure in NVIDIA License System (medium 5.4)
- [CVE-2022-21817](https://insights.sbomify.com/CVE-2022-21817/): Misconfiguration in nvidia:omniverse launcher (critical 9.3)
- [CVE-2022-21816](https://insights.sbomify.com/CVE-2022-21816/): Denial of service in NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming (medium 5.5)
- [CVE-2022-21815](https://insights.sbomify.com/CVE-2022-21815/): Null dereference in NVIDIA GPU Display Driver (medium 5.5)
- [CVE-2022-21814](https://insights.sbomify.com/CVE-2022-21814/): Privilege escalation in NVIDIA GPU Display Driver (medium 6.1)
- [CVE-2022-21813](https://insights.sbomify.com/CVE-2022-21813/): Privilege escalation in NVIDIA GPU Display Driver (medium 6.1)
- [CVE-2022-21812](https://insights.sbomify.com/CVE-2022-21812/): Privilege escalation in Intel(R) HAXM software (high 7.8)
- [CVE-2022-21810](https://insights.sbomify.com/CVE-2022-21810/): Command injection in smartctl (high 7.4)
- [CVE-2022-2181](https://insights.sbomify.com/CVE-2022-2181/): Advanced WordPress Reset < 1.6 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-21809](https://insights.sbomify.com/CVE-2022-21809/): File upload in InRouter302 (critical 9.9)
- [CVE-2022-21808](https://insights.sbomify.com/CVE-2022-21808/): Path traversal in CENTUM CS 3000 (high 8.8)
- [CVE-2022-21807](https://insights.sbomify.com/CVE-2022-21807/): Privilege escalation in Intel(R) VTune(TM) Profiler software (high 7.8)
- [CVE-2022-21806](https://insights.sbomify.com/CVE-2022-21806/): Use after free in Eufy Homebase 2 (critical 10.0)
- [CVE-2022-21805](https://insights.sbomify.com/CVE-2022-21805/): Cross-site scripting in php mailform (medium 6.1)
- [CVE-2022-21804](https://insights.sbomify.com/CVE-2022-21804/): Memory corruption in Intel QAT Driver for Windows (high 8.4)
- [CVE-2022-21803](https://insights.sbomify.com/CVE-2022-21803/): Prototype Pollution (high 7.3)
- [CVE-2022-21802](https://insights.sbomify.com/CVE-2022-21802/): Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2022-21801](https://insights.sbomify.com/CVE-2022-21801/): Integer overflow in reolink:rlc-410w firmware (high 8.6)
- [CVE-2022-21800](https://insights.sbomify.com/CVE-2022-21800/): Airspan Networks Mimosa Use of a Broken or Risky Cryptographic Algorithm (medium 6.5)
- [CVE-2022-2180](https://insights.sbomify.com/CVE-2022-2180/): GREYD.SUITE < 1.2.7 - Unauthenticated File Upload to RCE (critical 9.8)
- [CVE-2022-21799](https://insights.sbomify.com/CVE-2022-21799/): Cross-site scripting in ELECOM LAN router (medium 5.2)
- [CVE-2022-21798](https://insights.sbomify.com/CVE-2022-21798/): ICSA-22-053-02 GE Proficy CIMPLICITY-Cleartext (high 7.5)
- [CVE-2022-21797](https://insights.sbomify.com/CVE-2022-21797/): Arbitrary Code Execution (high 7.3)
- [CVE-2022-21796](https://insights.sbomify.com/CVE-2022-21796/): Memory corruption in reolink:rlc-410w firmware (critical 9.3)
- [CVE-2022-21794](https://insights.sbomify.com/CVE-2022-21794/): Auth bypass in Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, Intel(R) NUC Kits (high 7.7)
- [CVE-2022-21793](https://insights.sbomify.com/CVE-2022-21793/): Denial of service in Intel(R) Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the Intel(R) Ethernet 700 Series Controller drivers for VMWare (medium 5.5)
- [CVE-2022-21792](https://insights.sbomify.com/CVE-2022-21792/): Memory corruption in MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6893 (medium 6.7)
- [CVE-2022-21791](https://insights.sbomify.com/CVE-2022-21791/): Memory corruption in MT6833, MT6853, MT6873, MT6877, MT6885, MT6893 (medium 4.4)
- [CVE-2022-21790](https://insights.sbomify.com/CVE-2022-21790/): Memory corruption in MT6833, MT6853, MT6873, MT6877, MT6893 (medium 4.4)
- [CVE-2022-2179](https://insights.sbomify.com/CVE-2022-2179/): ICSA-22-188-01 Rockwell Automation MicroLogix Improper Restriction of Rendered UI Layers or Frames (medium 6.5)
- [CVE-2022-21789](https://insights.sbomify.com/CVE-2022-21789/): Race condition in MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8791, MT8797, MT8798 (medium 6.4)
- [CVE-2022-21788](https://insights.sbomify.com/CVE-2022-21788/): Privilege escalation in MT6879, MT6895, MT6983 (medium 6.7)
- [CVE-2022-21787](https://insights.sbomify.com/CVE-2022-21787/): Memory corruption in MT6833, MT6853, MT6873, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983, MT8791, MT8797, MT8798 (medium 6.7)
- [CVE-2022-21786](https://insights.sbomify.com/CVE-2022-21786/): Memory corruption in MT6833, MT6853, MT6873, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983, MT8791, MT8797, MT8798 (medium 6.7)
- [CVE-2022-21785](https://insights.sbomify.com/CVE-2022-21785/): Memory corruption in MT6877, MT6983, MT8167S, MT8168, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8667, MT8675, MT8695, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-21784](https://insights.sbomify.com/CVE-2022-21784/): Memory corruption in MT6761, MT6779, MT6781, MT6833, MT6853, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8167S, MT8168, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8667, MT8675, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-21783](https://insights.sbomify.com/CVE-2022-21783/): Memory corruption in MT6761, MT6779, MT6781, MT6833, MT6853, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8167S, MT8168, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8667, MT8675, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-21782](https://insights.sbomify.com/CVE-2022-21782/): Memory corruption in MT6761, MT6779, MT6781, MT6833, MT6853, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8167S, MT8168, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8667, MT8675, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-21781](https://insights.sbomify.com/CVE-2022-21781/): Memory corruption in MT6761, MT6779, MT6781, MT6833, MT6853, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8167S, MT8168, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8667, MT8675, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-21780](https://insights.sbomify.com/CVE-2022-21780/): Memory corruption in MT6761, MT6779, MT6781, MT6833, MT6853, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8167S, MT8168, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8667, MT8675, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-2178](https://insights.sbomify.com/CVE-2022-2178/): XSS in Saysis' Starcities (medium 6.1)
- [CVE-2022-21779](https://insights.sbomify.com/CVE-2022-21779/): Memory corruption in MT6761, MT6779, MT6781, MT6833, MT6853, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8167S, MT8168, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8667, MT8675, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-21778](https://insights.sbomify.com/CVE-2022-21778/): Memory corruption in MT6771, MT6779, MT6785, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6891, MT6893, MT8168, MT8175, MT8183, MT8365, MT8385, MT8788 (medium 6.7)
- [CVE-2022-21777](https://insights.sbomify.com/CVE-2022-21777/): Missing authorization in MT6580, MT6735, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6873, MT6875, MT6877, MT6879, MT6885, MT6891, MT6893, MT6895, MT6983, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8667, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (high 7.8)
- [CVE-2022-21776](https://insights.sbomify.com/CVE-2022-21776/): Use after free in MT6580, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8667, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8791, MT8797, MT8798 (medium 6.4)
- [CVE-2022-21775](https://insights.sbomify.com/CVE-2022-21775/): Use after free in MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT8167, MT8167S, MT8168, MT8173, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8675, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-21774](https://insights.sbomify.com/CVE-2022-21774/): Use after free in MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6875, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983 (medium 6.7)
- [CVE-2022-21773](https://insights.sbomify.com/CVE-2022-21773/): Use after free in MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6755, MT6755S, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6795, MT6797, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893 (medium 6.7)
- [CVE-2022-21772](https://insights.sbomify.com/CVE-2022-21772/): Race condition in MT6761, MT6765, MT6768, MT6771, MT6779, MT6833, MT6879, MT6885, MT6893, MT6895, MT6983, MT8185, MT8765, MT8766, MT8768, MT8785, MT8786, MT8788, MT8791, MT8797 (medium 6.7)
- [CVE-2022-21771](https://insights.sbomify.com/CVE-2022-21771/): Use after free in MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8168, MT8365 (medium 6.7)
- [CVE-2022-21770](https://insights.sbomify.com/CVE-2022-21770/): Information disclosure in MT6781, MT6877, MT6879, MT6893, MT6895, MT6983, MT8791, MT8797, MT8798 (medium 6.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/397/