CVE-2022-42841

CVE-2022-42841 is a type-confusion vulnerability reported for macOS. The public description states that Apple fixed the issue with improved checks, and that processing a maliciously crafted package may lead to arbitrary code execution. The NVD entry specifies fixes in macOS Monterey 12.6.2, macOS...

CVE-2022-32948

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-42841

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2. Processing a maliciously crafted package may lead to arbitrary code execution...

CVE-2022-42842

The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. A remote user may be able to cause kernel code execution...

CVE-2022-32860

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, macOS Big Sur 11.6.8. An app may be able to execute arbitrary code with kernel privileges...

Vulnerabilities fixed in Apple macOS

Apple has fixed vulnerabilities in macOS Monterey, Big Sur and Catalina. The vulnerabilities potentially enable a malicious person to able to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Circumvention of authentication Remote code...

CVE-2022-42821

CVE-2022-42821 is a macOS Gatekeeper bypass vulnerability caused by a logic issue that allows an app to bypass Gatekeeper checks. The NVD/NVD-derived entries indicate the issue is fixed in macOS Monterey 12.6.2, macOS Big Sur 11.7.2, and macOS Ventura 13. The primary impact described across sourc...

CVE-2022-42854

CVE-2022-42854 affects Apple macOS Bluetooth security. A memory handling issue could allow an app to disclose kernel memory. This vulnerability is addressed in macOS Monterey 12.6.2 and macOS Ventura 13.1 (Apple security updates HT213532/HT213533). Remediation: update to the fixed macOS versions;...

Apple iOS 输入验证错误漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in iOS prior to 15.6, iPadOS prior to 15.6, and macOS Monterey prior to 12.5, which stems from an integer overflow issue in input validation, and may allow an application to execute...

Apple macOS Monterey 缓冲区错误漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A security vulnerability exists in Apple macOS Monterey versions prior to 12.5, which stems from an out-of-bounds read and can be exploited by an attacker to execute arbitrary code with...

CVE-2022-42805

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32860

CVE-2022-32860 is a local kernel‑level vulnerability described as an out‑of‑bounds write caused by improved input validation. Root cause: a faulty input path allows arbitrary code execution with kernel privileges. Affected platforms/versions per the sources: iOS 15.6, iPadOS 15.6, macOS Monterey ...

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the Apple security updates page for the following products and app...

PT-2022-26619 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.2 macOS versions prior to 12.6.2 macOS versions prior to 13.1 Description: A type confusion issue was addressed with improved checks. Processing a maliciously crafted package may lead to arbitrary code execution...

PT-2022-26629 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.6.2 macOS versions prior to 13.1 Description: The issue was addressed with improved memory handling. An app may be able to disclose kernel memory. Recommendations: For macOS versions prior to 12.6.2, update to macOS...

About the security content of macOS Monterey 12.6.2

About the security content of macOS Monterey 12.6.2 This document describes the security content of macOS Monterey 12.6.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

PT-2022-7122 · Apple +8 · Macos Monterey +11

Name of the Vulnerable Software and Affected Versions: CUPS versions affected versions not specified macOS Big Sur versions prior to 11.7.7 macOS Monterey versions prior to 12.6.6 macOS Ventura versions prior to 13.4 Description: The issue is related to an authentication problem, which may allow ...

Apple Xcode Security Update (HT213496)

Apple Xcode is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:xcode"; ifdescription...

CVE-2022-42819

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may be able to read sensitive location information...

CVE-2022-42801

A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges...