CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2022-20410

2022-10-13

N/A

7.5 HIGH

In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-205570663

CVE-2022-2041

2022-07-06

N/A

5.4 MEDIUM

The Brizy WordPress plugin before 2.4.2 does not sanitise and escape some element content, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks

CVE-2022-20409

2022-11-08

N/A

6.7 MEDIUM

In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238177383References: Upstream kernel

CVE-2022-20408

2022-08-13

N/A

7.5 HIGH

Product: AndroidVersions: Android kernelAndroid ID: A-204782372References: N/A

CVE-2022-20407

2022-08-13

N/A

7.5 HIGH

Product: AndroidVersions: Android kernelAndroid ID: A-210916981References: N/A

CVE-2022-20406

2022-08-13