CVE-2022-26469

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In MtkEmail, there is a possible escalation of privilege due to fragment injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07216598; Issue ID: ALPS07216598.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-470

Affected software

No affected versions have been published.

Timeline

Published: Sep 6, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-26479.8A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The ma CVE-2022-264706.7In aie, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with Syst CVE-2022-264717.8In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege CVE-2022-264727.8In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with n CVE-2022-264736.7In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execut CVE-2022-264746.7In sensorhub, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of CVE-2022-264756.7In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2022-264768.8A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS), S CVE-2022-264777.5The Security Team noticed that the termination condition of the for loop in the readExternal method is a controllable variable, which, if ta CVE-2022-264799.8An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file (which can be created via an rsync backdoor CVE-2022-26489.8A vulnerability was found in SourceCodester Multi Language Hotel Management Software. It has been rated as critical. This issue affects some CVE-2022-264818.8An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request (C