CVE-2022-42867

CVE-2022-42867 is a use-after-free in WebKit/WebKitGTK (WebKitGTK). The root cause is a memory management issue that, when processing malicious web content, could lead to arbitrary code execution. The advisory notes this is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2, iPadOS 16....

CVE-2022-42848

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2, tvOS 16.2. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-42863

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-46700

A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution...

New Actively Exploited Zero-Day Vulnerability Discovered in Apple Products

Apple on Tuesday rolled out security updates to iOS, iPadOS, macOS, tvOS, and Safari web browser to address a new zero-day vulnerability that could result in the execution of malicious code. Tracked as CVE-2022-42856, the issue has been described by the tech giant as a type confusion issue in the...

About the security content of tvOS 16.2

About the security content of tvOS 16.2 This document describes the security content of tvOS 16.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

PT-2022-7573 · Apple +7 · Icloud For Windows +14

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16.2 tvOS versions prior to 16.2 iCloud for Windows versions prior to 14.1 macOS Ventura versions prior to 13.1 iOS versions prior to 16.2 iPadOS versions prior to 16.2 watchOS versions prior to 9.2 Description: The...

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the Apple security updates page for the following products and app...

PT-2022-7574 · Apple +7 · Icloud For Windows +14

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16.2 tvOS versions prior to 16.2 iCloud for Windows versions prior to 14.1 iOS versions prior to 15.7.2 and 16.2 iPadOS versions prior to 15.7.2 and 16.2 macOS Ventura versions prior to 13.1 watchOS versions prior to...

PT-2022-27955 · Apple · Icloud For Windows +6

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 16.2 Apple iCloud for Windows versions prior to 14.1 Apple macOS Ventura versions prior to 13.1 Apple iOS versions prior to 16.2 Apple iPadOS versions prior to 16.2 Apple watchOS versions prior to 9.2 Description:...

VulnCheck KEV: CVE-2022-42864

A race condition was addressed with improved state handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges...

PT-2022-7579 · Apple +7 · Macos Ventura +13

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16.2 tvOS versions prior to 16.2 macOS Ventura versions prior to 13.1 iOS versions prior to 15.7.2 and prior to 16.2 iPadOS versions prior to 15.7.2 and prior to 16.2 watchOS versions prior to 9.2 Description: The iss...

PT-2022-26620 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: Apple macOS versions prior to 11.7.2 Apple macOS versions prior to 12.6.2 Apple macOS versions prior to 13.1 Apple iOS versions prior to 16.2 Apple iPadOS versions prior to 16.2 Apple tvOS versions prior to 16.2 Apple watchOS versions prior t...

PT-2022-26639 · Apple · Macos Ventura +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.2 iPadOS versions prior to 16.2 macOS Ventura versions prior to 13.1 tvOS versions prior to 16.2 watchOS versions prior to 9.2 Description: The issue allows an app to bypass Privacy preferences. It was addressed by...

SUSE SLED15: WebKit2GTK-4.0-lang / WebKit2GTK-4.1-lang / WebKit2GTK-5.0-lang / etc (SUSE-SU-2022:4207-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4207-1 advisory. Security fixes: - CVE-2022-32888: Fixed possible arbitrary code execution via maliciously crafte...

Ubuntu 20.04 LTS / 22.04 LTS : WebKitGTK vulnerabilities (USN-5730-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5730-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website,...

Apple Security Update: tvOS 16.1.1

Apple recommends to install security update tvOS 16.1.1 on devices Apple TV 4K 3rd generation...

Apple tvOS Resource Management Error Vulnerability

Apple tvOS is a smart TV operating system from Apple, Inc. Apple tvOS has a security vulnerability that originates from post-release reuse and can be exploited by attackers to execute arbitrary code with kernel privileges...

Apple tvOS Buffer Overflow Vulnerability (CNVD-2022-74081)

Apple tvOS is a smart TV operating system from Apple, Inc. A security vulnerability exists in Apple tvOS, which stems from an application that could cause the system to unexpectedly terminate or write to kernel memory. No details of the vulnerability are currently available...

CVE-2022-42824

A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information...