CVE-2022-41740

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

IBM Robotic Process Automation 20.12 through 21.0.6 could allow an attacker with physical access to the system to obtain highly sensitive information from system memory. IBM X-Force ID: 238053.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-312

Affected software

No affected versions have been published.

Timeline

Published
Jan 5, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-417417.8NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before vCVE-2022-417427.1NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before vCVE-2022-417437.0NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_hls_module that might allow a local attacker to corCVE-2022-417447.0A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One Vulnerability Protection integrated component could allow a local attaCVE-2022-417457.0An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause meCVE-2022-417469.1A forced browsing vulnerability in Trend Micro Apex One could allow an attacker with access to the Apex One console on affected installationCVE-2022-417477.8An improper certification validation vulnerability in Trend Micro Apex One agents could allow a local attacker to load a DLL file with systeCVE-2022-417486.7A registry permissions vulnerability in the Trend Micro Apex One Data Loss Prevention (DLP) module could allow a local attacker with adminisCVE-2022-417497.8An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected instCVE-2022-41758.8Use after free in Camera Capture in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption viCVE-2022-417517.8Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 oCVE-2022-417578.8An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write
CVE-2022-41740: Medium severity, CVSS 4.6 | Vulnix