Information Disclosure - 8950 CVEs (Page 37/75)

About “Information Disclosure”

A curated feed of “Information Disclosure”-related CVEs appears below. We currently track 8950 CVEs for this tag (all time). In the last 365 days, 1212 were published. Average CVSS is 6.0 (all time; 6.1 over 365d), and 29% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor, CWE-125 - Out-of-bounds Read, CWE-862 - Missing Authorization.

In our taxonomy this topic maps to a LOW impact class. Vendor advisories and release notes are key. Verify compatibility matrices, prefer supported long term versions, and stage rollouts with monitoring. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.

CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).

CVSS ≥ 0.0

2022-08-12

Medium

CVE-2022-20326

In Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interact…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-20324

In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure…

CVSS: 5.5 CWE: CWE-203 - Observable Discrepancy View on NVD

Medium

CVE-2022-20323

In PackageManager, there is a possible package installation disclosure due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User i…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-20322

In PackageManager, there is a possible installed package disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Low

CVE-2022-20321

In Settings, there is a possible way for an application without permissions to read content of WiFi QR codes due to a missing permission check. This could lead to local information disclosure with no…

CVSS: 3.3 CWE: CWE-862 - Missing Authorization View on NVD

Low

CVE-2022-20320

In ActivityManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information discl…

CVSS: 3.3 CWE: CWE-203 - Observable Discrepancy View on NVD

Low

CVE-2022-20318

In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disc…

CVSS: 3.3 CWE: CWE-203 - Observable Discrepancy View on NVD

Medium

CVE-2022-20317

In SystemUI, there is a possible way to unexpectedly enable the external speaker due to a logic error in the code. This could lead to local information disclosure with no additional execution privile…

CVSS: 5.5 CWE: N/A View on NVD

Low

CVE-2022-20316

In ContentResolver, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information discl…

CVSS: 3.3 CWE: CWE-203 - Observable Discrepancy View on NVD

Low

CVE-2022-20315

In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges nee…

CVSS: 3.3 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-20312

In WifiP2pManager, there is a possible toobtain WiFi P2P MAC address without user consent due to missing permission check. This could lead to local information disclosure without additional execution…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Low

CVE-2022-20311

In Telecomm, there is a possible disclosure of registered self managed phone accounts due to a missing permission check. This could lead to local information disclosure with User execution privileges…

CVSS: 3.3 CWE: CWE-862 - Missing Authorization View on NVD

Low

CVE-2022-20310

CVSS: 3.3 CWE: CWE-862 - Missing Authorization View on NVD

Low

CVE-2022-20309

CVSS: 3.3 CWE: CWE-203 - Observable Discrepancy View on NVD

Low

CVE-2022-20307

In AlarmManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information d…

CVSS: 3.3 CWE: CWE-203 - Observable Discrepancy View on NVD

Low

CVE-2022-20305

In ContentService, there is a possible disclosure of available account types due to a missing permission check. This could lead to local information disclosure with User execution privileges needed.…

CVSS: 3.3 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-20304

In Content, there is a possible way to determinate the user's account due to side channel information disclosure. This could lead to local information disclosure with User execution privileges needed…

CVSS: 5.5 CWE: CWE-203 - Observable Discrepancy View on NVD

Medium

CVE-2022-20303

In ContentService, there is a possible way to determine if an account is on the device without GET_ACCOUNTS permission due to a missing permission check. This could lead to local information disclosu…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-20301

In Content, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges neede…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-20300

In Content, there is a possible way to check if the given account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privilege…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-20299

In ContentService, there is a possible way to check if the given account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution pr…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-20298

In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privilege…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-20296

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-20295

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-20294

In Content, there is a possible way to learn about an account present on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges n…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-20293

In LauncherApps, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosu…

CVSS: 5.5 CWE: CWE-203 - Observable Discrepancy View on NVD

Medium

CVE-2022-20291

In AppOpsService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclos…

CVSS: 5.5 CWE: CWE-203 - Observable Discrepancy View on NVD

Medium

CVE-2022-20289

CVSS: 5.5 CWE: N/A View on NVD

Medium

CVE-2022-20288

In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local informati…

CVSS: 5.5 CWE: N/A View on NVD

Medium

CVE-2022-20287

CVSS: 5.5 CWE: N/A View on NVD

Medium

CVE-2022-20285

In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclo…

CVSS: 5.5 CWE: N/A View on NVD

Medium

CVE-2022-20284

In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of phone accounts with User execution privileges needed. Us…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Low

CVE-2022-20280

In MMSProvider, there is a possible read of protected data due to improper input validationSQL injection. This could lead to local information disclosure of sms/mms data with User execution privilege…

CVSS: 3.3 CWE: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') View on NVD

Medium

CVE-2022-20279

In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information d…

CVSS: 5.5 CWE: CWE-203 - Observable Discrepancy View on NVD

Medium

CVE-2022-20278

In Accounts, there is a possible way to write sensitive information to the system log due to insufficient log filtering. This could lead to local information disclosure with System execution privileg…

CVSS: 5.5 CWE: CWE-532 - Insertion of Sensitive Information into Log File View on NVD

Medium

CVE-2022-20277

CVSS: 5.5 CWE: CWE-203 - Observable Discrepancy View on NVD

Medium

CVE-2022-20276

CVSS: 5.5 CWE: CWE-203 - Observable Discrepancy View on NVD

Medium

CVE-2022-20275

CVSS: 5.5 CWE: CWE-203 - Observable Discrepancy View on NVD

Medium

CVE-2022-20273

In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction i…

CVSS: 6.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

Medium

CVE-2022-20272

In PermissionController, there is a possible misunderstanding about the default SMS application's permission set due to misleading text. This could lead to local information disclosure with User priv…

CVSS: 5.5 CWE: CWE-276 - Incorrect Default Permissions View on NVD

Medium

CVE-2022-20270

In Content, there is a possible way to learn gmail account name on the device due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges need…

CVSS: 5.5 CWE: N/A View on NVD

Medium

CVE-2022-20263

In ActivityManager, there is a way to read process state for other users due to a missing permission check. This could lead to local information disclosure of app usage with User execution privileges…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Low

CVE-2022-20262

In ActivityManager, there is a possible way to check another process's capabilities due to a missing permission check. This could lead to local information disclosure with User execution privileges n…

CVSS: 3.3 CWE: CWE-862 - Missing Authorization View on NVD

Low

CVE-2022-20261

In LocationManager, there is a possible way to get location information due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. Use…

CVSS: 2.3 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-20259

In Telephony, there is a possible leak of ICCID and EID due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interac…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

2022-08-11

High

CVE-2022-20401

In SAEMM_RetrievEPLMNList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure post-authentication with…

CVSS: 7.5 CWE: CWE-125 - Out-of-bounds Read View on NVD

Low

CVE-2022-20252

CVSS: 3.3 CWE: CWE-203 - Observable Discrepancy View on NVD

Low

CVE-2022-20251

In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclos…

CVSS: 3.3 CWE: CWE-203 - Observable Discrepancy View on NVD

Low

CVE-2022-20249

CVSS: 3.3 CWE: CWE-203 - Observable Discrepancy View on NVD

High

CVE-2022-20247

In Media, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is no…

CVSS: 7.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

Low

CVE-2022-20245

In WindowManager, there is a possible method to create a recording of the lock screen due to an insecure default value. This could lead to local information disclosure with no additional execution pr…

CVSS: 2.4 CWE: N/A View on NVD

Medium

CVE-2022-20243

In Core Utilities, there is a possible log information disclosure. This could lead to local information disclosure of sensitive browsing data with System execution privileges needed. User interaction…

CVSS: 4.4 CWE: CWE-319 - Cleartext Transmission of Sensitive Information View on NVD

Medium

CVE-2022-20242

In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure…

CVSS: 5.5 CWE: CWE-203 - Observable Discrepancy View on NVD

Low

CVE-2022-20241

In Messaging, there is a possible way to attach a private file to an SMS message due to improper input validation. This could lead to local information disclosure with no additional execution privile…

CVSS: 3.3 CWE: CWE-20 - Improper Input Validation View on NVD

Medium

CVE-2021-0975

In USB Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosur…

CVSS: 5.5 CWE: CWE-203 - Observable Discrepancy View on NVD

Medium

CVE-2021-0735

In PackageManager, there is a possible way to get information about installed packages ignoring limitations introduced in Android 11 due to a missing permission check. This could lead to local inform…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2021-0734

In Settings, there is a possible way to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information disclosure of…

CVSS: 5.5 CWE: CWE-668 - Exposure of Resource to Wrong Sphere View on NVD

2022-08-10

Medium

CVE-2022-31674

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information disclosure.

CVSS: 4.3 CWE: CWE-532 - Insertion of Sensitive Information into Log File View on NVD

High

CVE-2022-31673

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Suc…

CVSS: 8.8 CWE: N/A View on NVD

Low

CVE-2022-20358

In startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected content of content providers due to a missing permission check. This could lead to local information disc…

CVSS: 3.3 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-20357

In writeToParcel of SurfaceControl.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges n…

CVSS: 5.5 CWE: CWE-908 - Use of Uninitialized Resource View on NVD

Medium

CVE-2022-20353

In onSaveRingtone of DefaultRingtonePreference.java, there is a possible inappropriate file read due to improper input validation. This could lead to local information disclosure with no additional e…

CVSS: 5.5 CWE: CWE-20 - Improper Input Validation View on NVD

Medium

CVE-2022-20352

In addProviderRequestListener of LocationManagerService.java, there is a possible way to learn which packages request location information due to a missing permission check. This could lead to local…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-20350

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notification access to the wrong app due to improper input validation. This could lead…

CVSS: 5.5 CWE: CWE-20 - Improper Input Validation View on NVD

Medium

CVE-2022-20346

In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no add…

CVSS: 6.5 CWE: CWE-125 - Out-of-bounds Read View on NVD

Medium

CVE-2022-33930

Dell Wyse Management Suite 3.6.1 and below contains Information Disclosure in Devices error pages. An attacker could potentially exploit this vulnerability, leading to the disclosure of certain sensi…

CVSS: 4.3 CWE: CWE-209 - Generation of Error Message Containing Sensitive Information View on NVD

Medium

CVE-2022-33929

Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in EndUserSummary page. An authenticated attacker could potentially exploit this vulnerability, lead…

CVSS: 6.1 CWE: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') View on NVD

2022-08-09

Medium

CVE-2022-35821

Azure Sphere Information Disclosure Vulnerability

CVSS: 4.4 CWE: N/A View on NVD

Medium

CVE-2022-34712

Windows Defender Credential Guard Information Disclosure Vulnerability

CVSS: 5.5 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Medium

CVE-2022-34710

Windows Defender Credential Guard Information Disclosure Vulnerability

CVSS: 5.5 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Medium

CVE-2022-34708

Windows Kernel Information Disclosure Vulnerability

CVSS: 5.5 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Medium

CVE-2022-34704

Windows Defender Credential Guard Information Disclosure Vulnerability

CVSS: 4.7 CWE: CWE-203 - Observable Discrepancy View on NVD

Medium

CVE-2022-34692

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS: 5.3 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Medium

CVE-2022-34686

Azure RTOS GUIX Studio Information Disclosure Vulnerability

CVSS: 5.5 CWE: N/A View on NVD

Medium

CVE-2022-34685

Azure RTOS GUIX Studio Information Disclosure Vulnerability

CVSS: 5.5 CWE: N/A View on NVD

Medium

CVE-2022-30197

Windows Kernel Information Disclosure Vulnerability

CVSS: 5.5 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Medium

CVE-2022-30134

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2022-21979

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS: 4.8 CWE: N/A View on NVD

2022-08-08

Medium

CVE-2022-2704

A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as problematic. This vulnerability affects unknown code of the file downloadFiles.php. The manipulation of t…

CVSS: 4.3 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

2022-08-05

High

CVE-2022-27633

An information disclosure vulnerability exists in the confctl_get_guest_wlan functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to information disclo…

CVSS: 7.5 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

High

CVE-2022-27630

An information disclosure vulnerability exists in the confctl_get_master_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to information disc…

CVSS: 7.5 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

High

CVE-2022-31614

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it may double-free some resources. An attacker may exploit this vulnerability with other vulnerabilities t…

CVSS: 7.0 CWE: CWE-415 - Double Free View on NVD

High

CVE-2022-31609

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows the guest VM to allocate resources for which the guest is not authorized. This vulnerability ma…

CVSS: 7.8 CWE: CWE-285 - Improper Authorization View on NVD

Medium

CVE-2022-33734

Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission.

CVSS: 6.2 CWE: CWE-927 - Use of Implicit Intent for Sensitive Communication View on NVD

Medium

CVE-2022-33733

Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission.

CVSS: 6.2 CWE: CWE-927 - Use of Implicit Intent for Sensitive Communication View on NVD

2022-08-04

High

CVE-2022-35858

The TEE_PopulateTransientObject and __utee_from_attr functions in Samsung mTower 0.3.0 allow a trusted application to trigger a memory overwrite, denial of service, and information disclosure by invo…

CVSS: 7.8 CWE: CWE-401 - Missing Release of Memory after Effective Lifetime View on NVD

2022-08-03

Medium

CVE-2022-36800

Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Browse Users" permission to view groups via an Information Disclosure vulnerability i…

CVSS: 4.3 CWE: CWE-732 - Incorrect Permission Assignment for Critical Resource View on NVD

2022-08-02

High

CVE-2022-37035

An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_packet.c, there is a possible use-after-free due to a race condition. This could…

CVSS: 8.1 CWE: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') View on NVD

2022-08-01

Low

CVE-2022-31186

NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in `next-auth` before `v4.10.2` and `v3.29.9` allows an attacker with l…

CVSS: 3.3 CWE: CWE-532 - Insertion of Sensitive Information into Log File View on NVD

Medium

CVE-2022-26436

In emi mpu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not need…

CVSS: 4.4 CWE: CWE-125 - Out-of-bounds Read View on NVD

Medium

CVE-2022-21791

In camera isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not n…

CVSS: 4.4 CWE: CWE-125 - Out-of-bounds Read View on NVD

Medium

CVE-2022-21790

CVSS: 4.4 CWE: CWE-125 - Out-of-bounds Read View on NVD

Critical

CVE-2022-31775

IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to an XML External Entity Injection (XXE) attack when processing…

CVSS: 9.1 CWE: CWE-611 - Improper Restriction of XML External Entity Reference View on NVD

2022-07-30

High

CVE-2022-35234

Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow an attacker to read sensitive information from other memory…

CVSS: 7.1 CWE: CWE-125 - Out-of-bounds Read View on NVD

2022-07-19

High

CVE-2022-22358

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this v…

CVSS: 7.1 CWE: CWE-611 - Improper Restriction of XML External Entity Reference View on NVD

2022-07-18

Medium

CVE-2022-2117

The GiveWP plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.20.2 via the /donor-wall REST-API endpoint which provides unauthenticated users w…

CVSS: 5.3 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

2022-07-15

Critical

CVE-2022-35409

An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap…

CVSS: 9.1 CWE: CWE-125 - Out-of-bounds Read View on NVD

2022-07-14

Medium

CVE-2022-23825

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.

CVSS: 6.5 CWE: CWE-668 - Exposure of Resource to Wrong Sphere View on NVD

Medium

CVE-2022-2401

Unrestricted information disclosure of all users in Mattermost version 6.7.0 and earlier allows team members to access some sensitive information by directly accessing the APIs.

CVSS: 6.5 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

2022-07-13

Medium

CVE-2022-20230

In choosePrivateKeyAlias of KeyChain.java, there is a possible access to the user's certificate due to improper input validation. This could lead to local information disclosure with no additional ex…

CVSS: 5.5 CWE: CWE-116 - Improper Encoding or Escaping of Output View on NVD

Medium

CVE-2022-20228

In various functions of C2DmaBufAllocator.cpp, there is a possible memory corruption due to a use after free. This could lead to remote information disclosure with no additional execution privileges…

CVSS: 6.5 CWE: CWE-416 - Use After Free View on NVD

Medium

CVE-2022-20227

In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with User execution privileges needed. User interaction is not nee…

CVSS: 5.5 CWE: CWE-125 - Out-of-bounds Read View on NVD

Medium

CVE-2022-20225

In getSubscriptionProperty of SubscriptionController.java, there is a possible read of a sensitive identifier due to a missing permission check. This could lead to local information disclosure with n…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

High

CVE-2022-20224

In AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure in the Bluetooth stack with no additi…

CVSS: 7.5 CWE: CWE-125 - Out-of-bounds Read View on NVD

Medium

CVE-2022-20221

In avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure over Bluetooth with no addit…

CVSS: 6.5 CWE: CWE-125 - Out-of-bounds Read View on NVD

Medium

CVE-2022-20219

In multiple functions of StorageManagerService.java and UserManagerService.java, there is a possible way to leave user's directories unencrypted due to a logic error in the code. This could lead to l…

CVSS: 5.5 CWE: CWE-312 - Cleartext Storage of Sensitive Information View on NVD

2022-07-12

Medium

CVE-2022-30223

Windows Hyper-V Information Disclosure Vulnerability

CVSS: 5.7 CWE: N/A View on NVD

Medium

CVE-2022-30213

Windows GDI+ Information Disclosure Vulnerability

CVSS: 5.5 CWE: N/A View on NVD

Medium

CVE-2022-30212

Windows Connected Devices Platform Service Information Disclosure Vulnerability

CVSS: 4.7 CWE: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') View on NVD

Medium

CVE-2022-30187

Azure Storage Library Information Disclosure Vulnerability

CVSS: 4.7 CWE: CWE-327 - Use of a Broken or Risky Cryptographic Algorithm View on NVD

Medium

CVE-2022-22711

Windows BitLocker Information Disclosure Vulnerability

CVSS: 5.7 CWE: N/A View on NVD

Medium

CVE-2022-22042

Windows Hyper-V Information Disclosure Vulnerability

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2022-22028

Windows Network File System Information Disclosure Vulnerability

CVSS: 5.9 CWE: N/A View on NVD

Medium

CVE-2022-21845

Windows Kernel Information Disclosure Vulnerability

CVSS: 4.7 CWE: N/A View on NVD

Low

CVE-2022-33705

Information exposure in Calendar prior to version 12.3.05.10000 allows attacker to access calendar schedule without READ_CALENDAR permission.

CVSS: 3.3 CWE: CWE-285 - Improper Authorization View on NVD

Low

CVE-2022-33697

Sensitive information exposure vulnerability in ImsServiceSwitchBase in ImsCore prior to SMR Jul-2022 Release 1 allows local attackers with log access permission to get IMSI through device log.

CVSS: 3.3 CWE: CWE-532 - Insertion of Sensitive Information into Log File View on NVD

Low

CVE-2022-33688

Sensitive information exposure vulnerability in EventType in SecTelephonyProvider prior to SMR Jul-2022 Release 1 allows local attackers with log access permission to get IMSI through device log.

CVSS: 3.3 CWE: CWE-532 - Insertion of Sensitive Information into Log File View on NVD

2022-07-06

Medium

CVE-2022-21770

In sound driver, there is a possible information disclosure due to symlink following. This could lead to local information disclosure with System execution privileges needed. User interaction is not…

CVSS: 6.7 CWE: CWE-59 - Improper Link Resolution Before File Access ('Link Following') View on NVD

Medium

CVE-2022-21769

In CCCI, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed…

CVSS: 4.4 CWE: CWE-125 - Out-of-bounds Read View on NVD

Medium

CVE-2022-21764

In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User…

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD