# CVEs published 2022-07-02

8 CVEs were published on July 2, 2022: 0 critical, 5 high. Days are UTC.

- [CVE-2022-34913](https://cve.now/CVE-2022-34913.md): md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. (no CVSS)
- [CVE-2022-28200](https://cve.now/CVE-2022-28200.md): NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond (CVSS 8.2, NVIDIA DGX A100)
- [CVE-2022-2284](https://cve.now/CVE-2022-2284.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8, vim/vim)
- [CVE-2022-2285](https://cve.now/CVE-2022-2285.md): Integer Overflow or Wraparound in vim/vim (CVSS 7.8, vim/vim)
- [CVE-2022-2286](https://cve.now/CVE-2022-2286.md): Out-of-bounds Read in vim/vim (CVSS 7.8, vim/vim)
- [CVE-2022-2287](https://cve.now/CVE-2022-2287.md): Out-of-bounds Read in vim/vim (CVSS 8.0, vim/vim)
- [CVE-2022-34911](https://cve.now/CVE-2022-34911.md): An issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x before 1.38.1. (no CVSS)
- [CVE-2022-34912](https://cve.now/CVE-2022-34912.md): An issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-07-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.