# CVEs published 2022-06-26

4 CVEs were published on June 26, 2022: 0 critical, 1 high. Days are UTC.

- [CVE-2022-34494](https://cve.now/CVE-2022-34494.md): rpmsg\_virtio\_add\_ctrl\_dev in drivers/rpmsg/virtio\_rpmsg\_bus.c in the Linux kernel before 5.18.4 has a double free. (no CVSS)
- [CVE-2022-34495](https://cve.now/CVE-2022-34495.md): rpmsg\_probe in drivers/rpmsg/virtio\_rpmsg\_bus.c in the Linux kernel before 5.18.4 has a double free. (no CVSS)
- [CVE-2020-27509](https://cve.now/CVE-2020-27509.md): Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting t (no CVSS)
- [CVE-2022-2206](https://cve.now/CVE-2022-2206.md): Out-of-bounds Read in vim/vim (CVSS 7.8, vim/vim)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-06-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.