CVE-2022-31699

LOW Year: 2022
CVSS v3 Score
3.3
Low
Weakness Type
CWE-787
View all →

Vulnerability Description

VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure.

Related Vulnerabilities

CVE-2020-18900

LOW
CVSS:3.3(Low)

A heap-based buffer overflow in the libexe_io_handle_read_coff_optional_header function of libyal libexe before 20181128. NOTE: the vendor has disputed this as described in libyal/libexe issue 1 on Gi...

CWE-7872020

CVE-2020-3989

LOW
CVSS:3.3(Low)

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability due to an out-of-bounds write issue in Cortado ThinPrint component. A malicious ac...

CWE-7872020

CVE-2020-8938

LOW
CVSS:3.3(Low)

An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to FromkLinuxSockAddr with attacker controlled content and size of klinux_addr which al...

CWE-7872020

CVE-2021-21046

LOW
CVSS:3.3(Low)

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an memory corruption vulnerability. An unauthenticated a...

CWE-7872021

CVE-2021-42069

LOW
CVSS:3.3(Low)

When a user opens manipulated Tagged Image File Format (.tif) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily una...

CWE-7872021

CVE-2022-20526

LOW
CVSS:3.3(Low)

In CanvasContext::draw of CanvasContext.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privil...

CWE-7872022