CVE-2022-26709

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-42825

This issue was addressed by removing additional entitlements. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to modify protected parts of the file system...

CVE-2022-42824

CVE-2022-42824 is a WebKitGTK/WebKit runtime logic issue that may disclose sensitive user information when processing malicious web content. The connected advisories confirm WebKitGTK/WebKitGTK-related fixes (CVE-2022-42824) across multiple distributions: Debian DLA-3183-1 and DSA-5274-1 for wpew...

CVE-2022-42817

Summary of CVE-2022-42817 (Apple ecosystem) : A logic issue affecting Safari/WebKit on Apple systems could allow leakage of sensitive data when visiting a malicious website. Root cause described as improved state management. Fixed in software updates: iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iP...

CVE-2022-32858

CVE-2022-32858 affects Apple platforms (iOS, macOS, watchOS) where a memory handling issue could allow an app to leak sensitive kernel state. The official description indicates the root cause is improved memory handling, and Apple fixed it in iOS 16, macOS Ventura 13, and watchOS 9. Connected sou...

CVE-2022-26717

CVE-2022-26717 is a WebKitGTK/WebKit use-after-free issue that can lead to arbitrary code execution when processing malicious web content. The Initial Description states the flaw is addressed with memory-management improvements and lists affected Apple platforms (tvOS 15.5, watchOS 8.6, iOS 15.5,...

CVE-2022-32940

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32925

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2022-32924

CVE-2022-32924 affects Apple platforms (tvOS 16.1; macOS Big Sur 11.7; macOS Ventura 13; watchOS 9.1; iOS 16.1; iPadOS 16). Root cause: improved memory handling exposed a vulnerability that could allow an app to execute arbitrary code with kernel privileges. Impact is kernel-level code execution....

CVE-2022-42799

The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiting a malicious website may lead to user interface spoofing...

CVE-2022-26710

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing maliciously crafted web content may lead to arbitrary code execution...

Apple Releases Security Updates for Multiple Products 

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the Apple security updates page for the following products and app...

Apple watchOS 安全漏洞

Apple watchOS is an operating system for smartwatches from Apple. A security vulnerability exists in Apple watchOS. An attacker could exploit this vulnerability to modify protected portions of the file system...

PT-2022-21599 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 15.7.1 and prior to 16.1 Apple iPadOS versions prior to 15.7.1 and prior to 16 Apple tvOS versions prior to 16.1 Apple watchOS versions prior to 9.1 Apple macOS versions prior to 11.7.1, prior to 12.6.1, and prior ...

Apple watchOS 信任管理问题漏洞

Apple watchOS is an operating system for smartwatches from Apple, Inc. A security vulnerability exists in Apple watchOS, which stems from the handling of maliciously constructed certificates that could lead to the execution of arbitrary code...

Apple watchOS 安全漏洞

Apple watchOS is an operating system for smartwatches from Apple. A security vulnerability exists in Apple watchOS, which stems from an application that may be able to execute arbitrary code with kernel privileges...

Apple watchOS 缓冲区错误漏洞

Apple watchOS is an operating system for smartwatches from Apple. A security vulnerability exists in Apple watchOS. An attacker can exploit this vulnerability to execute kernel code...

Apple watchOS 安全漏洞

Apple watchOS is an operating system for smartwatches from Apple. A security vulnerability exists in Apple watchOS. An attacker could exploit this vulnerability to gain access to sensitive user information...

Apple watchOS 安全漏洞

Apple watchOS is an operating system for smartwatches from Apple. A security vulnerability exists in Apple watchOS, which stems from an application that may be able to execute arbitrary code with kernel privileges...

PT-2022-26588 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 16.1 Apple iOS versions prior to 15.7.1 and prior to 16.1 Apple iPadOS versions prior to 15.7.1 and prior to 16 Apple macOS versions prior to 13, prior to 12.6.1, and prior to 11.7.1 Apple watchOS versions prior t...