NVD disclosure day
CVE-2022-22947
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Organizations using Spring Cloud Gateway face a code injection risk if the Gateway Actuator endpoint is enabled and unsecured. This allows remote attackers to execute arbitrary code on the host, posing a business risk.
CVE-2022-0492
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's cgroup v1 release_agent feature allows privilege escalation and bypass of namespace isolation. This requires local, authenticated access and could lead to unauthorized system access if reachable.
CVE-2022-22706
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw in the Arm Mali GPU Kernel Driver allows unauthorized memory writes, potentially impacting system stability and data. This affects specific versions of the Midgard, Bifrost, and Valhall drivers, posing a risk of data manipulation or system compromise for organizations. Organizations should identify affected asse