CVE-2022-2586 CISA KEV · Actively exploited
Use after free in The Linux Kernel Organization
CVSS score
5.3
EPSS probability
%10.2
Risk score
1.1
Published
2 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
A minimal reproduction of an AngularJS <textarea> XSS vulnerability on IE (tracked as CVE-2022-25869).
Makefile Go / Python
gcc exploit.c -o exploit -lmnl -lnftnl -no-pie -lpthread
Makefile Go / Python
NVD reference
https://www.vicarius.io/vsociety/posts/use-after-free-vulnerability-linked-chain-between-nft-tables-cve-2022-2586
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2021-44228 Actively exploited
Improper input validation in Apache Log4j
S
Patch verified Public Exploits:22EPSS %100
9.8
CVE-2022-30333 Actively exploited
Path traversal in N/a
N
Patch verifiedEPSS %99
9.0
CVE-2021-40438 Actively exploited
mod_proxy SSRF
AS
Patch verified Public Exploits:11EPSS %100
9.8
CVE-2016-8735 Actively exploited
Vulnerability in Apache Tomcat
A
Partial patch Public Exploits:1EPSS %90
8.8
CVE-2017-0144 Actively exploited
Vulnerability in Microsoft Corporation Windows SMB
MC
Patch verified Public Exploits:10EPSS %99
8.8
CVE-2017-0145 Actively exploited
Vulnerability in Microsoft Corporation Windows SMB
MC
Patch verified Public Exploits:4EPSS %90
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-2586"