CVEs published December 12 to December 18, 2022
753 CVEs were published Dec 12 to Dec 18, 2022, 63 of them critical. CISA added 6 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 753
- Critical
- 63
- Added to CISA KEV
- 6
- Busiest day
- Tue, Dec 13 (222)
- Quietest day
- Sat, Dec 17 (23)
- December 12, 202286 CVEs · 8 critical
- December 13, 2022222 CVEs · 15 critical
- December 14, 202288 CVEs · 14 critical
- December 15, 2022109 CVEs · 14 critical
- December 16, 2022189 CVEs · 6 critical
- December 17, 202223 CVEs · 6 critical
- December 18, 202236 CVEs
Added to CISA KEV 6
- CVE-2022-26500Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to inte
- CVE-2022-26501Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).
- CVE-2022-27518Unauthenticated remote arbitrary code executionCitrix Gateway, Citrix ADC
- CVE-2022-42475A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.Fortinet FortiProxy · Fortinet FortiOS
- CVE-2022-44698Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-42856A type confusion issue was addressed with improved state handling.Apple tvOS