CVE-2022-39087

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Jan 4, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-390886.7In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges nCVE-2022-390894.4In mlog service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with SysteCVE-2022-39094.8The Add Comments WordPress plugin through 1.0.1 does not sanitise and escape some of its settings, which could allow high privilege users suCVE-2022-390907.8In power management service, there is a missing permission check. This could lead to set up power management service with no additional execCVE-2022-390917.8In power management service, there is a missing permission check. This could lead to set up power management service with no additional execCVE-2022-390927.8In power management service, there is a missing permission check. This could lead to set up power management service with no additional execCVE-2022-390937.8In power management service, there is a missing permission check. This could lead to set up power management service with no additional execCVE-2022-390947.8In power management service, there is a missing permission check. This could lead to set up power management service with no additional execCVE-2022-390957.8In power management service, there is a missing permission check. This could lead to set up power management service with no additional execCVE-2022-390967.8In power management service, there is a missing permission check. This could lead to set up power management service with no additional execCVE-2022-390977.8In power management service, there is a missing permission check. This could lead to set up power management service with no additional execCVE-2022-390987.8In power management service, there is a missing permission check. This could lead to set up power management service with no additional exec
CVE-2022-39087: Medium severity, CVSS 6.7 | Vulnix