CVEs published on July 28, 2022

36 vulnerabilities, ordered with the most urgent first.

8.8 High severity
WebRTC Heap Buffer Overflow Exploited
CVE-2022-2294Jul 28, 2022GoogleEPSS 70.8%
8.8 High severity
Chrome: Use After Free
CVE-2022-2480Jul 28, 2022GoogleEPSS 18.8%
9.8 Critical severity
Media Server: Buffer Copy without Checking Size of Input
CVE-2022-22683Jul 28, 2022SynologyEPSS 1.65%
9.8 Critical severity
Audio Station: Buffer Copy without Checking Size of Input
CVE-2022-27612Jul 28, 2022Synology
8.8 High severity
Apache Calcite Avatica: Improper Initialization
CVE-2022-36364Jul 28, 2022ApacheEPSS 3.16%
9.3 Critical severity
Chrome: Out-of-bounds Read
CVE-2022-2010Jul 28, 2022GoogleEPSS 1.26%
8.0 High severity
Groupware: Use of Externally-Controlled Input to Select Classes or Code
CVE-2022-30287Jul 28, 2022HordeEPSS 69.4%
8.8 High severity
Chrome: Out-of-bounds Write
CVE-2022-2415Jul 28, 2022GoogleEPSS 1.98%
8.8 High severity
Chrome: Use After Free
CVE-2022-2156Jul 28, 2022GoogleEPSS 1.52%
8.8 High severity
DiskStation Manager (DSM): Improper Neutralization of Special Elements used in an OS Command
CVE-2022-22684Jul 28, 2022SynologyEPSS 1.6%
8.8 High severity
Chrome: Use After Free
CVE-2022-1919Jul 28, 2022GoogleEPSS 1.38%
8.8 High severity
Chrome: Access of Resource Using Incompatible Type
CVE-2022-2295Jul 28, 2022GoogleEPSS 1.46%
8.8 High severity
Chrome: Use After Free
CVE-2022-2481Jul 28, 2022GoogleEPSS 1.21%
8.8 High severity
Chrome: Use After Free
CVE-2022-2007Jul 28, 2022GoogleEPSS 1.05%
8.8 High severity
Chrome: Double Free
CVE-2022-2008Jul 28, 2022GoogleEPSS 1.08%
8.8 High severity
Chrome: Use After Free
CVE-2022-2011Jul 28, 2022GoogleEPSS 1.11%
8.8 High severity
Chrome: Use After Free
CVE-2022-2157Jul 28, 2022GoogleEPSS 1.03%
8.8 High severity
Chrome: Use After Free
CVE-2022-2158Jul 28, 2022GoogleEPSS 1.06%
8.8 High severity
Chrome: Use After Free
CVE-2022-2161Jul 28, 2022GoogleEPSS 1.01%
8.8 High severity
Chrome: Use After Free
CVE-2022-2163Jul 28, 2022Google
8.8 High severity
Chrome: Use After Free
CVE-2022-2296Jul 28, 2022GoogleEPSS 1.15%
8.8 High severity
Chrome: Use After Free
CVE-2022-2477Jul 28, 2022Google
8.8 High severity
Chrome: Use After Free
CVE-2022-2478Jul 28, 2022Google
8.8 High severity
CardDAV Server: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-27613Jul 28, 2022SynologyEPSS 1.09%
8.8 High severity
Chrome: Use After Free
CVE-2022-2399Jul 28, 2022Google
8.1 High severity
WebDAV Server: Improper Limitation of a Pathname to a Restricted Directory
CVE-2022-22685Jul 28, 2022SynologyEPSS 1.28%
8.1 High severity
DNS Server: Improper Limitation of a Pathname to a Restricted Directory
CVE-2022-27615Jul 28, 2022SynologyEPSS 1.22%
8.1 High severity
Audio Station: Improper Limitation of a Pathname to a Restricted Directory
CVE-2022-27611Jul 28, 2022SynologyEPSS 1.05%
7.5 High severity
Media Server: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2022-27614Jul 28, 2022Synology
9.8 Critical severity
PHP: Out-of-bounds Write
CVE-2022-31627Jul 28, 2022PHP GroupEPSS 2.14%
9.8 Critical severity
Safety Manager Firmware: Insufficient Verification of Data Authenticity
CVE-2022-30315Jul 28, 2022Honeywell
8.8 High severity
Flex Appliance: Server-Side Request Forgery
CVE-2022-36997Jul 28, 2022Veritas
8.1 High severity
Tera2 Zero Client: Improper Certificate Validation
CVE-2022-1805Jul 28, 2022Tera2 Zero Client
8.1 High severity
Saia Pg5 Controls Suite: Authentication Bypass by Spoofing
CVE-2022-30319Jul 28, 2022Honeywell
7.5 High severity
Safety Manager Firmware: Missing Authentication for Critical Functionality
CVE-2022-30313Jul 28, 2022Honeywell
7.5 High severity
Simplenetwork: Double Free
CVE-2022-36234Jul 28, 2022Simplenetwork Project

CVEs published on July 28, 2022

WebRTC Heap Buffer Overflow Exploited