CVE-2022-27588

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.6 build 20220401 and later

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published
May 5, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-27598.6Delta Electronics Delta Robot Automation Studio (DRAS) versions prior to 1.13.20 are affected by improper restrictions where the software prCVE-2022-275926.7An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow lCVE-2022-275939.1An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, ThiCVE-2022-275957.8An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local CVE-2022-275969.8A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to CVE-2022-275972.7A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authentCVE-2022-275982.7A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authentCVE-2022-275994.4An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possiCVE-2022-27604.3In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an erroCVE-2022-276007.5An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulCVE-2022-276078.1Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4_HvccAtom class, a different issue than CVE-2018-14531.CVE-2022-276086.0Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administ
CVE-2022-27588: Critical severity, CVSS 9.8 | Vulnix