Skip to content

CyberSecBulletin

CVEs published on January 2, 2023

8 vulnerabilities, ordered with the most urgent first.

9.8 Critical severity
Fortinet FortiOS Heap-Based Buffer Overflow Exploited
CVE-2022-42475Jan 2, 2023FortinetEPSS 99.5%
7.5 High severity
Chrome: Use After Free
CVE-2022-3842Jan 2, 2023GoogleEPSS 18.3%
8.8 High severity
Chrome: Integer Overflow or Wraparound
CVE-2022-2743Jan 2, 2023Google
8.8 High severity
Chrome: Concurrent Execution using Shared Resource with Improper Synchronization
CVE-2022-2742Jan 2, 2023Google
9.8 Critical severity
Cryptocurrency Widgets Pack: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-4059Jan 2, 2023Cryptocurrency Widgets PackEPSS 5.09%
8.8 High severity
Kiwi: Weak Password Requirements
CVE-2023-22451Jan 2, 2023Kiwitcms
8.8 High severity
iubenda | All-in-one Compliance for GDPR /…: Cross-Site Request Forgery
CVE-2022-3911Jan 2, 2023iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more
7.2 High severity
WP RSS By Publishers: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-4360Jan 2, 2023WP RSS By PublishersEPSS 1.2%