NVD disclosure day
CVE-2022-22947
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Organizations using Spring Cloud Gateway face a code injection risk if the Gateway Actuator endpoint is enabled and unsecured. This allows remote attackers to execute arbitrary code on the host, posing a business risk.
CVE-2022-0492
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's cgroup v1 release_agent feature allows privilege escalation and bypass of namespace isolation. This requires local, authenticated access and could lead to unauthorized system access if reachable.
CVE-2022-22706
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw in the Arm Mali GPU Kernel Driver allows unauthorized memory writes, potentially impacting system stability and data. This affects specific versions of the Midgard, Bifrost, and Valhall drivers, posing a risk of data manipulation or system compromise for organizations. Organizations should identify affected asse
CVE-2022-25089
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Printix software contains a vulnerability allowing unauthorized modification of system settings by abusing privileged APIs. An attacker could exploit this remotely, potentially compromising system integrity and availability. It is important to confirm if this print management software is used within your environment an