Security Vulnerabilities - CVEs Published In February 2022
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.
CVSS Score
6.1
EPSS Score
0.0
Published
2022-02-07
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.
CVSS Score
6.1
EPSS Score
0.0
Published
2022-02-07
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a system crash.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-02-07
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where a user in the guest OS can cause a GPU interrupt storm on the hypervisor host, leading to a denial of service.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-02-07
A Use of Hardcoded Credentials vulnerability exists in AquaView versions 1.60, 7.x, and 8.x that could allow an authenticated local attacker to manipulate users and system settings.
CVSS Score
9.3
EPSS Score
0.0
Published
2022-02-07
Fix of CVE-2021-40525 do not prepend delimiters upon valid directory validations. Affected implementations include: - maildir mailbox store - Sieve file repository This enables a user to access other users data stores (limited to user names being prefixed by the value of the username being used).
CVSS Score
4.3
EPSS Score
0.028
Published
2022-02-07
Microsoft Edge (Chromium-based) Tampering Vulnerability
CVSS Score
5.3
EPSS Score
0.008
Published
2022-02-07
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score
6.3
EPSS Score
0.008
Published
2022-02-07
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score
7.7
EPSS Score
0.012
Published
2022-02-07
The WooCommerce Stored Exporter WordPress plugin before 2.7.1 was affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the woo_ce admin page.
CVSS Score
6.1
EPSS Score
0.011
Published
2022-02-07