About the security content of macOS Monterey 12.3

About the security content of macOS Monterey 12.3 This document describes the security content of macOS Monterey 12.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

PT-2022-15539 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Big Sur 11.6.5 macOS versions prior to Monterey 12.3 macOS Catalina affected versions not specified, but fixed in Security Update 2022-003 Description: A validation issue existed in the handling of symlinks, which has...

PT-2022-15598 · Apple · Apple Macos +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.5 macOS Monterey versions prior to 12.3 Security Update versions prior to 2022-003 Catalina Description: The issue allows a plug-in to potentially inherit the application's permissions and access user data. This w...

PT-2022-15595 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.5 macOS Monterey versions prior to 12.3 macOS Catalina versions without Security Update 2022-003 Description: The issue allows a person with access to a Mac to bypass the Login Window. This was addressed with...

Apple macOS Monterey 缓冲区错误漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. Apple macOS Monterey versions prior to 12.3 suffer from a buffer error vulnerability that stems from a boundary error when processing a file in GarageBand MIDI. A remote attacker could crea...

Apple macOS Monterey 权限许可和访问控制问题漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A privilege-granting and access-control issue vulnerability exists in the Apple macOS Monterey AppKit module, which originates from a malicious application that may be able to obtain root...

PT-2022-15576 · Apple · Apple Macos +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.5 macOS Monterey versions prior to 12.3 macOS Catalina versions without Security Update 2022-003 Description: An out-of-bounds read issue was addressed with improved input validation. Processing a maliciously...

Apple macOS Monterey 访问控制错误漏洞

Apple macOS Monterey is the 18th major release of Apple Inc.'s macOS for the Macintosh desktop operating system. Apple macOS Monterey prior to 12.3 suffers from an Access Control Error vulnerability in NSSpellChecker that could allow a malicious application to access information about a user's...

Apple macOS Monterey 资源管理错误漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A resource management error vulnerability exists in the Apple macOS Monterey AMD module, which arises from an application that may be able to execute arbitrary code with kernel privileges...

PT-2022-15569 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Monterey 12.3 macOS versions prior to Big Sur 11.6.5 macOS Catalina versions prior to Security Update 2022-003 Description: A maliciously crafted ZIP archive may bypass Gatekeeper checks. This issue was addressed with...

PT-2022-15610 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.5 macOS Monterey versions prior to 12.3 macOS Catalina versions without Security Update 2022-003 Description: A type confusion issue was addressed with improved state handling, allowing an application to potential...

Apple macOS Monterey 缓冲区错误漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A buffer error vulnerability exists in Apple macOS Monterey versions prior to 12.3, which originates from a boundary error in the system's SMB daemon when handling untrusted input. A remote...

PT-2022-15580 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.5 macOS Monterey versions prior to 12.3 macOS Catalina versions prior to Security Update 2022-003 Description: An out-of-bounds write issue was addressed with improved bounds checking, which may allow an applicati...

About the security content of Xcode 13.3

About the security content of Xcode 13.3 This document describes the security content of Xcode 13.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

SUSE SLES12 Security Update : webkit2gtk3 (SUSE-SU-2022:0811-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0811-1 advisory. - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS...

Debian DSA-5084-1 : wpewebkit - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5084 advisory. - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 v...

Apple Patches Actively Exploited WebKit Zero Day

Apple has patched yet another zero-day vulnerability, this time in its WebKit browser engine, that threat actors already are actively exploiting to compromise iPhones, iPads and MacOS devices. The zero-day, tracked as CVE-2022-22620, is a Use-After-Free issue, which is related to incorrect use of...

Zero-day vulnerability in WebKit affects Apple macOS

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here A third zero-day vulnerability has been identified since the latest zero-day bugs discovery in macOS Monterey in the year 2022. This flaw impacts the WebKit component, which is a cross-platform web browser engine that is...

CVE-2022-22592

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may prevent Content Security Policy from being enforced...

CVE-2022-22590

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution...