CVE-2022-48349

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

The control component has a spoofing vulnerability. Successful exploitation of this vulnerability may affect confidentiality and availability.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-290

Affected software

No affected versions have been published.

Timeline

Published
Mar 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-48355.4The Social Sharing Toolkit WordPress plugin through 2.6 does not validate and escape some of its shortcode attributes before outputting themCVE-2022-483507.5The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability may affect confidentCVE-2022-483517.5The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability.CVE-2022-483527.5Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic.CVE-2022-483539.8Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which resulCVE-2022-483546.5The Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth proCVE-2022-483556.5The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth procCVE-2022-483567.5The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulnerability may cause fCVE-2022-483577.5Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of service (DoS) attacks tCVE-2022-483587.4The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerability by a malicious app can cause servicCVE-2022-483597.5The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability mayCVE-2022-48365.4The Breadcrumb WordPress plugin before 1.5.33 does not validate and escape some of its shortcode attributes before outputting them back in t
CVE-2022-48349: Critical severity, CVSS 9.1 | Vulnix