NVD disclosure day
CVE-2022-22824
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An integer overflow vulnerability exists in the Expat XML parsing library's `defineAttribute` function, which could allow an attacker to cause a denial-of-service or other impacts by sending specially crafted XML data to affected applications. This critical flaw resides in a widely used software component that may be e
CVE-2022-22823
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An integer overflow vulnerability exists in the Expat XML parsing library. This could potentially be exploited by sending specially crafted XML data to an application that uses a vulnerable version of Expat, possibly leading to denial-of-service or data integrity issues. The actual risk depends on how and where the lib
CVE-2022-22822
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An integer overflow vulnerability exists in the Expat XML parsing library that could allow for malicious code execution if reachable. This issue affects applications that process XML data and should be reviewed for potential impact. The Expat library is a widely used component across various software.
CVE-2022-22265
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the NPU driver can allow unauthorized memory writes and code execution. This impacts affected mobile devices, potentially leading to data compromise and operational disruption. The business risk involves unauthorized access and data breaches, requiring the implementation of vendor security updates.
CVE-2021-35247
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
Serv-U's web login screen accepted unsanitized characters, creating a risk of unauthorized data modification. While downstream systems mitigated the impact, organizations using affected versions should update to ensure proper input validation.