CVE-2022-26725

CVE-2022-26725 is a macOS Monterey 12.4–specific issue. A logic/state-management flaw allowed photo location information to persist after it was removed via Preview Inspector. The vulnerability affects the macOS component handling image metadata, and Apple lists the fix in macOS Monterey 12.4 (no...

CVE-2022-26703

The CVE-2022-26703 entry concerns an authorization issue on iOS/iPadOS that could allow a person with physical access to an iPhone/iPad to view photos from the lock screen. The connected sources indicate this is addressed in iOS 15.5 and iPadOS 15.5 through improved state management. Affected com...

DEBIAN-CVE-2022-26691

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges...

ALPINE-CVE-2022-26691

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges...

CVE-2022-26691

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges...

CVE-2022-26691

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges...

CVE-2022-26691

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges...

CVE-2022-22662

A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose sensitive user information...

Code injection

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges...

CVE-2022-26691

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges...

UBUNTU-CVE-2022-26691

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges...

CVE-2022-22662

CVE-2022-22662 is a WebKitGTK/WebKitGTK4 cookie management issue (state management) that may disclose sensitive user information when processing malicious web content. It is fixed by macOS Security Update 2022-003 for Catalina and macOS Big Sur 11.6.5, as cited across multiple sources in the conn...

Apple iTunes < 12.12.4 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.12.4. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213259 advisory. - A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for...

Oracle Linux 8 : webkit2gtk3 (ELSA-2022-1777)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1777 advisory. 2.34.6-1 - Update to 2.34.6 Related: 1985042 2.34.5-1 - Update to 2.34.5 - Related: 1985042 2.34.4-1 - Update to 2.34.4 - Resolves: 1985042 2.32.4-1 -...

About the security content of Xcode 13.4

About the security content of Xcode 13.4 This document describes the security content of Xcode 13.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

ROS-20220516-07

A vulnerability in the implementation of the xsxprtfree function of the Sun RPC Open Network Computing Remote Procedure Call kernel of Linux operating systems is related to state management errors. state management errors. Exploitation of the vulnerability could allow an attacker to cause a denia...

webkitgtk: logic issue was addressed with improved state management

A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process unexpected cross-origin attacks...

Privilege Escalation

webkit2gtk is vulnerable to privilege escalation. The vulnerability exists due to a logic issue that was addressed with improved state management which allows remote attackers to gain elevated privileges...

The vulnerability in the implementation of the xs_xprt_free() function in the Sun RPC (Open Network Computing Remote Procedure Call) kernel of Linux operating systems allows a attacker to cause a service failure.

The vulnerability of the implementation of the xsxprtfree function in the Sun RPC Open Network Computing Remote Procedure Call kernel of Linux operating systems is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2022-22671

An authentication issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4. A person with physical access to an iOS device may be able to access photos from the lock screen...