Is CVE-2022-1227 being actively exploited?

CVE-2022-1227 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2022-1227?

CVE-2022-1227 has a CVSS 3.1 base score of 8.8 (HIGH).

CVE-2022-1227

HIGH · CVSS 8.8EPSS 4.2%EU EUVD

A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.

Key facts

CVSS score: 8.8 (v3.1)
Severity: HIGH
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-281
EPSS score: 4.2% (91th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2022-1644)
Published: April 29, 2022
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2022-1644 in the EU Vulnerability Database. Last updated in EUVD on August 2, 2024.

View on the EU Vulnerability Database

Affected products

fedoraproject / fedora
fedoraproject / fedora
podman project / podman
psgo project / psgo
redhat / developer tools
redhat / enterprise linux
redhat / enterprise linux
redhat / enterprise linux eus
redhat / enterprise linux for ibm z systems
redhat / enterprise linux for ibm z systems
redhat / enterprise linux for power little endian
redhat / enterprise linux for power little endian
redhat / enterprise linux server
redhat / enterprise linux server aus
redhat / enterprise linux server for power little endian update services for sap solutions
redhat / enterprise linux server tus
redhat / enterprise linux server update services for sap solutions
redhat / enterprise linux workstation
redhat / openshift container platform
redhat / quay

Certified products that may be affected

24 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Red Hat Enterprise Linux 8 NSS Cryptographic Module - Red Hat, Inc. - FIPS 140 5513 - active
Red Hat Enterprise Linux 8 Kernel Cryptographic API - Red Hat, LLC - FIPS 140 5461 - active
Red Hat Enterprise Linux 8 Kernel Cryptographic API - Red Hat, Inc. - FIPS 140 5089 - active
Red Hat Enterprise Linux 8.6 - Red Hat, Inc. - Common Criteria CCEVS-VR-VID-11309-2024 - archived
Red Hat Enterprise Linux 8 OpenSSL Cryptographic Module - Red Hat®, Inc. - FIPS 140 4642 - historical

See all 24 in the Security Certifications Explorer.

References

https://bugzilla.redhat.com/show_bug.cgi?id=2070368(Issue Tracking, Third Party Advisory)
https://github.com/containers/podman/issues/10941(Exploit, Issue Tracking, Third Party Advisory)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ/
https://security.netapp.com/advisory/ntap-20240628-0001/

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain