CVE-2022-21123

MediumCVSS 5.5/10Last modified Oct 14, 2026

Description

Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-459

Affected software

No affected versions have been published.

Timeline

Published
Jun 15, 2022
Last modified
Oct 14, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-211247.8Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause iCVE-2022-211255.5Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable infoCVE-2022-211267.8The package com.github.samtools:htsjdk before 3.0.1 are vulnerable to Creation of Temporary File in Directory with Insecure Permissions due CVE-2022-211275.5Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially CVE-2022-211287.8Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an authenticated user to potentiallyCVE-2022-211299.8Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exporCVE-2022-21135.4Cross-site Scripting (XSS) - Stored in GitHub repository inventree/inventree prior to 0.7.2.CVE-2022-211315.5Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure viCVE-2022-211326.5Directory traversal vulnerability in pfSense-pkg-WireGuard pfSense-pkg-WireGuard 0.1.5 versions prior to 0.1.5_4 and pfSense-pkg-WireGuard 0CVE-2022-211335.5Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable CVE-2022-211347.5A firmware update vulnerability exists in the "update" firmware checks functionality of reolink RLC-410W v3.0.0.136_20121102. A spCVE-2022-211365.5Improper input validation for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable denial of service via local
CVE-2022-21123: Medium severity, CVSS 5.5 | Vulnix