CVE-2022-2586Medium· 5.3▾ Midnight⚠ Exploited in the wild0dayPoC availableIt was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 29.2 · likelihood 2 · exploitation 25
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Aug 13.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Federal remediation due Jul 17, 2024
10%
3 GitHub repos
Last analysed / modified upstream
Added to the CISA catalog on Jun 26, 2024. Federal remediation due Jul 17, 2024. View catalog ↗
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
simatic_s7-1500_tm_mfp_firmware < 1.1sinec_os < 2.4linux_kernel >= 3.16, < 4.14.316linux_kernel >= 4.15, < 4.19.256linux_kernel >= 4.20, < 5.4.211linux_kernel >= 5.5, < 5.10.137linux_kernel >= 5.11, < 5.15.61linux_kernel >= 5.16, < 5.18.18linux_kernel >= 5.19, < 5.19.2ubuntu_linux = 14.04ubuntu_linux = 16.04ubuntu_linux = 18.04ubuntu_linux = 20.04ubuntu_linux = 22.04Upgrade past the affected range:
simatic_s7-1500_tm_mfp_firmware 1.1sinec_os 2.4linux_kernel 5.19.2Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2022-2588Medium· 5.3It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.
CVE-2026-110936Medium· 6.7A vulnerability has been identified in Siemens Software Center (All versions)
CVE-2022-1292High· 7.3The c_rehash script does not properly sanitise shell metacharacters to prevent command injection
CVE-2022-26485High· 8.8Removing an XSLT parameter during processing could have lead to an exploitable use-after-free
CVE-2020-3992Critical· 9.8OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue
CVE-2021-34486High· 7.8Windows Event Tracing Elevation of Privilege Vulnerability