CVE-2022-22620

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 v. 16612.4.9.1.8 and 15612.4.9.1.8. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a...

CVE-2022-22620

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 v. 16612.4.9.1.8 and 15612.4.9.1.8. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a...

CVE-2022-22620

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 v. 16612.4.9.1.8 and 15612.4.9.1.8. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a...

CVE-2022-22620

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 v. 16612.4.9.1.8 and 15612.4.9.1.8. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a...

CVE-2022-22587

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may...

CVE-2021-45967

creationtimestamp| type| source ---|---|--- 2022-03-18 11:22:24+00:00| seen| https://t.me/cibsecurity/39189 2023-12-21 17:42:26+00:00| seen| https://t.me/arpsyndicate/2054 2025-03-09 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-03-09 2025-03-09 00:00:00+00:00|...

CVE-2022-22620

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 v. 16612.4.9.1.8 and 15612.4.9.1.8. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a...

CVE-2022-0971

creationtimestamp| type| source ---|---|--- 2022-03-17 12:50:00+00:00| exploited| https://t.me/truesecator/2742 2022-03-17 18:36:58+00:00| exploited| https://t.me/piratesofyemen/613 2022-03-17 18:37:01+00:00| exploited| https://t.me/piratesofyemen1213/446 2022-03-17 18:37:11+00:00| exploited|...

Multiple TotoLink Product Command Injection Vulnerabilities (CNVD-2022-47974)

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. A command injection vulnerability exists in several TotoLink products. The vulnerability stems from the failure of the hosttime parameter in the NTPSyncWithHost function to properly filter the...

CVE-2022-0811

creationtimestamp| type| source ---|---|--- 2022-03-16 17:20:37+00:00| seen| https://t.me/cibsecurity/39034 2022-03-17 08:46:54+00:00| published-proof-of-concept| https://t.me/cKure/9049 2022-03-17 14:30:04+00:00| published-proof-of-concept| https://t.me/truesecator/2743 2022-03-17 17:37:10+00:00...

Apple iOS, iPadOS, and macOS Monterey Permissions Licensing and Access Control Issues Vulnerability

Apple iOS and Apple iPadOS are products of Apple, Inc. Apple iOS is an operating system developed for mobile devices. The vulnerability stems from the fact that FaceTime does not properly restrict access to resources from unauthorized roles, and can be exploited by an attacker with physical acces...

CVE-2022-25485

creationtimestamp| type| source ---|---|--- 2022-03-15 21:19:38+00:00| seen| https://t.me/cibsecurity/38964 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-01-26 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...

CVE-2022-25486

creationtimestamp| type| source ---|---|--- 2022-03-15 21:19:38+00:00| seen| https://t.me/cibsecurity/38965 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-03-16 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...

CISA Adds 15 Known Exploited Vulnerability to Catalog

CISA has added 15 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context...

CISA list of 95 new known exploited vulnerabilities raises questions

On Friday March 3, the Cybersecurity and Infrastructure Security Agency CISA added a whopping number of 95 new known exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog. This catalog provides Federal Civilian Executive Branch FCEB agencies with a list of vulnerabilities that...

Adobe After Effects Buffer Overflow Vulnerability (CNVD-2022-22096)

Adobe After Effects is a suite of visual effects and motion graphics software from Adobe, which is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

Adobe After Effects Out-of-Bounds Writing Vulnerability (CNVD-2022-22094)

Adobe After Effects is a suite of visual effects and motion graphics software from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe After Effects processing files, which could be exploited by attackers to execute arbitrary code in the context of the current user...

TP-Link TL-WR886N Stack Overflow Vulnerability (CNVD-2022-21168)

The TP-Link TL-WR886N is a wireless router from China P&L. A stack overflow vulnerability exists in the TP-Link TL-WR886N /cloudconfig/routerpost/checkregverifycode, which can be exploited by a remote attacker to submit a special request that can crash the application or can be used to execute...

CVE-2020-17456

creationtimestamp| type| source ---|---|--- 2022-03-12 17:21:36+00:00| published-proof-of-concept| https://t.me/intelexch/10571 2022-04-14 15:17:01+00:00| exploited| https://t.me/NeKaspersky/2117 2022-07-13 13:02:16+00:00| seen| MISP/8bf50bb8-94dd-4004-a646-5f78db6f0b6a 2024-12-29 00:00:00+00:00|...