CVE-2022-22659

CVE-2022-22659 – Apple iOS/iPadOS NetworkExtension information disclosure Affected products: iPhone and iPad running iOS/iPadOS. The vulnerability is described as a logic issue in NetworkExtension causing potential leakage of sensitive user information when the device is in a privileged network p...

CVE-2022-22665

A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to gain root privileges...

CVE-2022-22653

CVE-2022-22653 corresponds to a logic issue in iOS/iPadOS that could allow a malicious website to access information about the user and their devices. The NVD/NIST entry notes the fix in iOS 15.4 and iPadOS 15.4, with CVSS v3.1 base score 7.5 (Network, High impact on confidentiality; no impact on...

CVE-2022-22653

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and iPadOS 15.4. A malicious website may be able to access information about the user and their devices...

CVE-2022-22639

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. An application may be able to gain elevated privileges...

CVE-2022-22639

Technical details for CVE-2022-22639 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-22632

CVE-2022-22632 involves a logic issue in state management that could allow privilege escalation. Apple fixed it in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, watchOS 8.5, and macOS Monterey 12.3. A malicious application may be able to elevate privileges; the vulnerability is addre...

CVE-2022-22632

A logic issue was addressed with improved state management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, watchOS 8.5, macOS Monterey 12.3. A malicious application may be able to elevate privileges...

CVE-2022-22617

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to gain elevated privileges...

CVE-2022-22592

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may prevent Content Security Policy from being enforced...

CVE-2022-22592

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may prevent Content Security Policy from being enforced...

CVE-2022-22578

CVE-2022-22578 is an Apple platform logic issue related to insufficient validation that could allow a malicious app to gain root privileges. The vulnerability is addressed by patches in tvOS 15.3, iOS 15.3, iPadOS 15.3, watchOS 8.4, and macOS Monterey 12.2. Technical sources (Apple security updat...

CVE-2022-22578

A logic issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2. A malicious application may be able to gain root privileges...

PT-2022-15601 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.4 iPadOS versions prior to 15.4 Description: A logic issue was addressed with improved restrictions, which could allow a malicious website to access information about the user and their devices. Recommendations: For i...

About the security content of Safari 15.4

About the security content of Safari 15.4 This document describes the security content of Safari 15.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of watchOS 8.5

About the security content of watchOS 8.5 This document describes the security content of watchOS 8.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

PT-2022-15570 · Apple · Macos Monterey +3

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.6.5 macOS Monterey versions prior to 12.3 macOS Catalina versions prior to Security Update 2022-003 Catalina Description: A logic issue was addressed with improved state management, which may allow an...

About the security content of macOS Monterey 12.3

About the security content of macOS Monterey 12.3 This document describes the security content of macOS Monterey 12.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

About the security content of Security Update 2022-003 Catalina

About the security content of Security Update 2022-003 Catalina This document describes the security content of Security Update 2022-003 Catalina. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...

SUSE SLES15: libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc (SUSE-SU-2022:0703-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0703-1 advisory. Update to version 2.34.6 bsc1196133: - CVE-2022-22620: Processing maliciously crafted web content may have lead to arbitrary code...