How severe is CVE-2022-32746?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 5.4 out of 10.

What type of vulnerability is CVE-2022-32746?

This is classified as CWE-416, which is a common weakness in software security.

CVE-2022-32746 - MEDIUM Severity | CVSS 5.4

Vulnerability Description

A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.

Related Vulnerabilities

CVE-2019-11778

MEDIUM

CVSS:5.4(Medium)

If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a session expiry interval, and the will delay int...

CWE-4162019

CVE-2024-5498

MEDIUM

CVSS:5.4(Medium)

Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CWE-4162024

CVE-2025-0445

MEDIUM

CVSS:5.4(Medium)

Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CWE-4162025

CVE-2025-5283

MEDIUM

CVSS:5.4(Medium)

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CWE-4162025

CVE-2014-0203

MEDIUM

CVSS:5.5(Medium)

The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows local users to cause ...

CWE-4162014

CVE-2014-3471

MEDIUM

CVSS:5.5(Medium)

Use-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU instance crash) via hotplug and hotunplug operations of Virtio...

CWE-4162014