NVD disclosure day

Published threat advisories for March 25, 2022

CVE-2022-0995

Linux Kernel Watch Queue Out-of-Bounds Write Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

The Linux kernel contains an out-of-bounds memory write flaw in its event notification subsystem, which could allow a local user to gain privileged access or cause a denial of service. This internal vulnerability requires local access to exploit and impacts system stability and security if the watch_queue subsystem is

NVD modified: NVD date unavailable • CISA KEV

CVE advisoryKnown Exploit

CVE-2022-1040

Sophos Firewall Authentication Bypass and Code Execution Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A vulnerability in Sophos Firewall's User Portal and Webadmin allows remote attackers to bypass authentication and execute code. This impacts organizations by potentially compromising affected systems and leading to data breaches. The vulnerability has a critical severity rating and is listed as actively exploited.

NVD modified: NVD date unavailable • CISA KEV