Weekly digest
Week 48, 2022 (28 Nov – 4 Dec)
A quiet week: only 2 new CVEs against a recent average of about 10. Severity skewed high: 1 high, 50% of the total. No new KEV entries.
2
New CVEs
0
Critical
0
KEV additions
0
Records changed
New this week, ranked by depth score
The 2 that matter most of the 2 published.
CVE-2022-3591High· 7.8Use After Free in GitHub repository vim/vim prior to 9.0.0789.
Use After Free in GitHub repository vim/vim prior to 9.0.0789.
▾ Twilightneovim · neovimEPSS 0.39%via NVD
CVE-2022-46146Medium· 6.2Prometheus Exporter-Toolkit is vulnerable to authentication bypass
Prometheus Exporter-Toolkit is vulnerable to authentication bypass
▾ Sunlitprometheus · github.com/prometheus/exporter-toolkitEPSS 1.3%via OSV
Most-affected vendors
By CVEs published in the period.