CVE-2022-26456 | Vulnetix

CVE-2022-26456 PUBLISHED CVSS 4.400000095367432 MEDIUM

In vow, there is a possible information disclosure due to a symbolic link following. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545473; Issue ID: ALPS06545473.

EPSS 0.12% · 2.5th percentile

Risk Scores

CVSS 3.1

4.400000095367432

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS Score

0.12%

2.5th percentile

Affected Products

Vendor	Product	Versions
google	android	11.0
MediaTek, Inc.	MT6769, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT6983, MT8185, MT8789, MT8791, MT8797	Android 11.0

Timeline

Sep 6, 2022 CVE Published
Sep 7, 2022 EPSS Score
Sep 9, 2022 EPSS Score
Oct 22, 2022 EPSS Score
Dec 7, 2022 EPSS Score
Jan 21, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 21, 2023 EPSS Score
Jun 6, 2023 EPSS Score
Jul 21, 2023 EPSS Score
Sep 4, 2023 EPSS Score
Oct 19, 2023 EPSS Score

References

Open in Interactive Console →