CVE-2022-23731

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

V8 javascript engine (heap vulnerability) can cause privilege escalation ,which can impact on some webOS TV models.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

VendorProductVersions
n/aLG webOS TVwebOS 4.0 or higher

References

Timeline

Published
Mar 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-237328.8A path traversal vulnerability was identified in GitHub Enterprise Server management console that allowed the bypass of CSRF protections. ThCVE-2022-237335.4A stored XSS vulnerability was identified in GitHub Enterprise Server that allowed the injection of arbitrary attributes. This injection wasCVE-2022-237348.8A deserialization of untrusted data vulnerability was identified in GitHub Enterprise Server that could potentially lead to remote code execCVE-2022-237376.5An improper privilege management vulnerability was identified in GitHub Enterprise Server that allowed users with improper privileges to creCVE-2022-237385.7An improper cache key vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to access private repositoCVE-2022-237399.8An incorrect authorization vulnerability was identified in GitHub Enterprise Server, allowing for escalation of privileges in GraphQL API reCVE-2022-23744.8The Simply Schedule Appointments WordPress plugin before 1.5.7.7 does not sanitise and escape some of its settings, which could allow high pCVE-2022-237408.8CRITICAL: An improper neutralization of argument delimiters in a command vulnerability was identified in GitHub Enterprise Server that enablCVE-2022-237417.2An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a scoped user-to-server token to escalate tCVE-2022-237427.8Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low priCVE-2022-237437.8Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process. In addition, weaCVE-2022-237442.3Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection b
CVE-2022-23731: High severity, CVSS 7.8 | Vulnix