cyber·news

HIGH

CVE-2022-40227 (CVSS 7.5) — A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versi...

NVD CVE-2022-40227 1334d ago

HIGH

CVE-2022-20920 (CVSS 7.7) — A vulnerability in the SSH implementation of Cisco IOS Software and Cisco IOS XE Software could allo...

NVD CVE-2022-20920 1335d ago

HIGH

CVE-2022-34169 (CVSS 7.5) — The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing mali...

NVD CVE-2022-34169 1418d ago

HIGH

CVE-2022-34151 (CVSS 8.1) — Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all mo...

NVD CVE-2022-34151 1433d ago

HIGH

CVE-2022-33971 (CVSS 7.5) — Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 se...

NVD CVE-2022-33971 1433d ago

HIGH

CVE-2022-24946 (CVSS 7.5) — Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware...

NVD CVE-2022-24946 1452d ago

HIGH

CVE-2022-27782 (CVSS 7.5) — libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been ch...

NVD CVE-2022-27782 1465d ago

HIGH

CVE-2022-27781 (CVSS 7.5) — libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returne...

NVD CVE-2022-27781 1465d ago

HIGH

CVE-2022-27775 (CVSS 7.5) — An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using...

NVD CVE-2022-27775 1465d ago

HIGH

CVE-2022-22576 (CVSS 8.1) — An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might a...

NVD CVE-2022-22576 1472d ago

HIGH

CVE-2022-22977 (CVSS 7.1) — VMware Tools for Windows(12.0.0, 11.x.y and 10.x.y) contains an XML External Entity (XXE) vulnerabil...

NVD CVE-2022-22977 1474d ago

HIGH

CVE-2022-23742 (CVSS 7.8) — Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensi...

NVD CVE-2022-23742CVE-2020-0896 1486d ago

HIGH

CVE-2022-27224 (CVSS 7.2) — An issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated at...

NVD CVE-2022-27224 1489d ago

HIGH

CVE-2022-25647 (CVSS 7.7) — The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Da...

NVD CVE-2022-25647 1497d ago

HIGH

CVE-2022-0354 (CVSS 7.3) — A vulnerability was reported in Lenovo System Update that could allow a local user with interactive ...

NVD CVE-2022-0354 1506d ago

HIGH

CVE-2022-0778 (CVSS 7.5) — The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it t...

NVD CVE-2022-0778 1544d ago

CRITICAL

CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability (Linux Kernel)

CISA KEV CVE-2022-0492actively-exploited +1 4d ago

HIGH

CVE-2022-0492 (CVSS 7.8) — A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgro...

NVD 1556d ago

HIGH

CVE-2021-43619 (CVSS 7.8) — Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition....

NVD CVE-2021-43619 1558d ago

HIGH

CVE-2021-22788 (CVSS 7.5) — A CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an attac...

NVD CVE-2021-22788 1576d ago

HIGH

CVE-2021-22787 (CVSS 7.5) — A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the d...

NVD CVE-2021-22787 1576d ago

HIGH

CVE-2021-22785 (CVSS 7.5) — A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files...

NVD CVE-2021-22785 1576d ago

HIGH

CVE-2020-7534 (CVSS 8.8) — A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could...

NVD CVE-2020-7534 1582d ago

HIGH

CVE-2022-23307 (CVSS 8.8) — CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chain...

NVD CVE-2022-23307CVE-2020-9493 1600d ago

HIGH

CVE-2022-23302 (CVSS 8.8) — JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the att...

NVD CVE-2022-23302CVE-2021-4104 1600d ago

HIGH

CVE-2022-21840 (CVSS 8.8) — Microsoft Office Remote Code Execution Vulnerability

NVD CVE-2022-21840 1607d ago

HIGH

CVE-2021-45450 (CVSS 7.5) — In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow ...

NVD CVE-2021-45450 1628d ago

HIGH

CVE-2021-43875 (CVSS 7.8) — Microsoft Office Graphics Remote Code Execution Vulnerability

NVD CVE-2021-43875 1634d ago

HIGH

CVE-2021-43256 (CVSS 7.8) — Microsoft Excel Remote Code Execution Vulnerability

NVD CVE-2021-43256 1634d ago

HIGH

CVE-2021-4104 (CVSS 7.5) — JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has wr...

NVD CVE-2021-4104CVE-2021-44228 1635d ago

HIGH

CVE-2021-44149 (CVSS 7.8) — An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0. The OPTEE-OS CSU drive...

NVD CVE-2021-44149 1642d ago

HIGH

CVE-2021-36133 (CVSS 7.1) — The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several mod...

NVD CVE-2021-36133 1642d ago

HIGH

CVE-2021-4019 (CVSS 7.8) — vim is vulnerable to Heap-based Buffer Overflow

NVD CVE-2021-4019 1648d ago

HIGH

CVE-2021-22792 (CVSS 7.5) — A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modico...

NVD CVE-2021-22792 1738d ago

HIGH

CVE-2021-22926 (CVSS 7.5) — libcurl-using applications can ask for a specific client certificate to be used in a transfer. This ...

NVD CVE-2021-22926 1766d ago

HIGH

CVE-2021-33012 (CVSS 8.6) — Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending...

NVD CVE-2021-33012 1793d ago

HIGH

CVE-2021-22766 (CVSS 7.5) — A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and ne...

NVD CVE-2021-22766 1821d ago

HIGH

CVE-2021-32926 (CVSS 7.5) — When an authenticated password change request takes place, this vulnerability could allow the attack...

NVD CVE-2021-32926 1829d ago

HIGH

CVE-2021-27386 (CVSS 7.5) — A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPL...

NVD CVE-2021-27386 1851d ago

HIGH

CVE-2021-27385 (CVSS 7.5) — A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPL...

NVD CVE-2021-27385 1851d ago

HIGH

CVE-2021-27383 (CVSS 7.5) — A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPL...

NVD CVE-2021-27383 1851d ago

HIGH

CVE-2021-25662 (CVSS 7.5) — A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPL...

NVD CVE-2021-25662 1851d ago

HIGH

CVE-2021-25661 (CVSS 7.5) — A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPL...

NVD CVE-2021-25661 1851d ago

HIGH

CVE-2021-25660 (CVSS 7.5) — A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPL...

NVD CVE-2021-25660 1851d ago

HIGH

CVE-2021-29241 (CVSS 7.5) — CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of ser...

NVD CVE-2021-29241 1860d ago

HIGH

CVE-2021-22659 (CVSS 8.6) — Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attack...

NVD CVE-2021-22659 1899d ago

HIGH

CVE-2021-25667 (CVSS 8.8) — A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE ...

NVD CVE-2021-25667 1909d ago

HIGH

CVE-2021-22713 (CVSS 7.5) — A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exis...

NVD CVE-2021-22713 1913d ago

HIGH

CVE-2021-21974 (CVSS 8.8) — OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ...

NVD CVE-2021-21974 1928d ago

HIGH

CVE-2021-22703 (CVSS 7.5) — A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION740...

NVD CVE-2021-22703 1933d ago

HIGH

CVE-2021-22702 (CVSS 7.5) — A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION740...

NVD CVE-2021-22702 1933d ago

Prev Page 19 / 21 Next

CRITICAL CISA KEV Tue, 02 Jun 2026 00:00:00 UTC

CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability (Linux Kernel)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

TL;DR

Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature. Due: 2026-06-05. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CVE-2022-0492actively-exploited

Read full story ↗