CVE-2022-26741

CVE-2022-26741 is a macOS Monterey 12.4 fix for a buffer overflow. The available documents show a memory handling improvement addressing a vulnerability that could allow arbitrary code execution with kernel privileges, but do not specify the affected component or exploit details.

CVE-2022-26736

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges...

CVE-2022-26727

This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. A malicious application may be able to modify protected parts of the file system...

CVE-2022-26726

CVE-2022-26726 is an Apple macOS/iOS vulnerability describing an issue where an app may be able to capture a user’s screen. The available connected references consistently state the root cause as a privilege/permission-related flaw resolved by Apple. The fixed versions are explicitly listed: Secu...

CVE-2022-26725

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. Photo location information may persist after it is removed with Preview Inspector...

CVE-2022-26725

CVE-2022-26725 is a macOS Monterey 12.4–specific issue. A logic/state-management flaw allowed photo location information to persist after it was removed via Preview Inspector. The vulnerability affects the macOS component handling image metadata, and Apple lists the fix in macOS Monterey 12.4 (no...

CVE-2022-26708

CVE-2022-26708 : The vulnerability is described as a fix for an issue that could allow unexpected application termination or arbitrary code execution, addressed in macOS Monterey 12.4. Connected documents corroborate that macOS Monterey 12.4 contains the fix; no concrete details about affected pr...

CVE-2022-26704

CVE-2022-26704 concerns a validation issue in the handling of symlinks. The root cause is improved validation of symlinks, addressing a path where an app could gain elevated privileges. The vulnerability is fixed in macOS Monterey 12.4. In public disclosures, the issue is described as a local pri...

CVE-2022-26701

A race condition was addressed with improved locking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges...

CVE-2022-26694

CVE-2022-26694 affects macOS Monterey (and related Apple advisories) where a plug-in could inherit the host application's permissions and access user data. The issue was mitigated by improved checks and is fixed in macOS Monterey 12.4. The primary affected surface is plug-in handling within the m...

CVE-2022-29801

A vulnerability has been identified in Teamcenter V12.4 All versions V12.4.0.13, Teamcenter V13.0 All versions V13.0.0.9. The application contains a XML External Entity Injection XXE vulnerability. This could allow an attacker to view files on the application server filesystem...

macOS 12.x < 12.4 Multiple Vulnerabilities (HT213257)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.4. It is, therefore, affected by multiple vulnerabilities: - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 - A crafted URI se...

Apple Mac OS X Security Update (HT213257)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-18037 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 15.5 macOS Monterey versions prior to 12.4 iOS versions prior to 15.5 iPadOS versions prior to 15.5 Description: An out-of-bounds write issue was addressed with improved bounds checking, allowing an application to...

PT-2022-18045 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.4 Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue allows an attacker that has already achieved code execution in macOS Recovery to potentially escalate to...

PT-2022-18018 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 Description: The issue concerns the handling of environment variables, which has been addressed with improved validation. A user may be able to view sensitive user information due to this issue. Recommendations: F...

PT-2022-21462 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 Description: The issue allows an app with root privileges to potentially access private information. This was addressed by enabling hardened runtime. Recommendations: For versions prior to 12.4, update to macOS...

PT-2022-18033 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to macOS Monterey 12.4 macOS versions prior to macOS Big Sur 11.6.6 macOS Catalina versions prior to Security Update 2022-004 Description: A malicious application may be able to access restricted files due to this issue...

About the security content of macOS Monterey 12.4

About the security content of macOS Monterey 12.4 This document describes the security content of macOS Monterey 12.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

PT-2022-38204

Name of the Vulnerable Software and Affected Versions macOS Monterey versions prior to 12.4 Description An issue with state handling allows a person with physical access to a Mac to bypass the Login Window. Recommendations Update to macOS Monterey 12.4...