CVE-2022-26726

CVE-2022-26726 is an Apple macOS/iOS vulnerability describing an issue where an app may be able to capture a user’s screen. The available connected references consistently state the root cause as a privilege/permission-related flaw resolved by Apple. The fixed versions are explicitly listed: Secu...

CVE-2022-26726

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-004 Catalina, watchOS 8.6, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to capture a user's screen...

CVE-2022-26725

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. Photo location information may persist after it is removed with Preview Inspector...

CVE-2022-26725

CVE-2022-26725 is a macOS Monterey 12.4–specific issue. A logic/state-management flaw allowed photo location information to persist after it was removed via Preview Inspector. The vulnerability affects the macOS component handling image metadata, and Apple lists the fix in macOS Monterey 12.4 (no...

CVE-2022-26722

Summary (CVE-2022-26722): The memory initialization issue is fixed in Security Update 2022-004 for macOS Catalina, macOS Monterey 12.4, and macOS Big Sur 11.6.6. The vulnerability could allow a malicious application to gain root privileges. Publicly available connected documents confirm the same ...

CVE-2022-26721

A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to gain root privileges...

CVE-2022-26721

Technical details about CVE-2022-26721 are not publicly provided in the supplied documents; monitor for updates.

CVE-2022-26720

CVE-2022-26720 is an out-of-bounds write vulnerability resolved by Security Update 2022-004 for macOS Catalina, Monterey 12.4, and Big Sur 11.6.6. The issue allows a malicious application to potentially execute arbitrary code with kernel privileges due to improved bounds checking. Affected platfo...

CVE-2022-26718

CVE-2022-26718 is an out-of-bounds read issue in macOS components that was mitigated by input validation fixes. Public details show the vulnerability affects macOS Big Sur 11.6.6 and macOS Monterey 12.4, with the potential consequence of an application gaining elevated privileges. The CVSS v3.1 v...

CVE-2022-26712

CVE-2022-26712 involves removal of vulnerable code that allowed bypassing macOS System Integrity Protection (SIP), enabling a malicious app to modify protected filesystem areas. Affected products include macOS Big Sur 11.6.6 and macOS Monterey 12.4 (per NVD). The issue is fixed in these versions ...

CVE-2022-26712

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to modify protected parts of the file system...

CVE-2022-26708

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. An attacker may be able to cause unexpected application termination or arbitrary code execution...

CVE-2022-26708

CVE-2022-26708 : The vulnerability is described as a fix for an issue that could allow unexpected application termination or arbitrary code execution, addressed in macOS Monterey 12.4. Connected documents corroborate that macOS Monterey 12.4 contains the fix; no concrete details about affected pr...

CVE-2022-26704

CVE-2022-26704 concerns a validation issue in the handling of symlinks. The root cause is improved validation of symlinks, addressing a path where an app could gain elevated privileges. The vulnerability is fixed in macOS Monterey 12.4. In public disclosures, the issue is described as a local pri...

CVE-2022-26701

A race condition was addressed with improved locking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges...

CVE-2022-26698

CVE-2022-26698 is an out-of-bounds read in the processing of a maliciously crafted AppleScript binary. Root cause: insufficient bounds checking in the affected AppleScript handling. Affected platforms and fixes per documents: macOS Catalina via Security Update 2022-004; macOS Monterey 12.4; macOS...

CVE-2022-26697

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of...

CVE-2022-26697

CVE-2022-26697 describes an out-of-bounds read issue in macOS components where processing a maliciously crafted AppleScript binary could terminate the application or disclose process memory. The common public record confirms the root cause as an out-of-bounds read with memory disclosure implicati...

CVE-2022-26694

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. A plug-in may be able to inherit the application's permissions and access user data...

CVE-2022-26694

CVE-2022-26694 affects macOS Monterey (and related Apple advisories) where a plug-in could inherit the host application's permissions and access user data. The issue was mitigated by improved checks and is fixed in macOS Monterey 12.4. The primary affected surface is plug-in handling within the m...