CVE-2022-26700

CVE-2022-26700: A memory corruption issue in WebKit-derived components is addressed. According to the CVE page, processing maliciously crafted web content may lead to arbitrary code execution. Apple specifies fixes in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, and Safa...

CVE-2022-22628

CVE-2022-22628 is a WebKitGTK/WebKit2GTK use-after-free vulnerability that can lead to arbitrary code execution when processing malicious web content. Connected advisories confirm exploitation potential in WebKitGTK/WebKit2GTK across Linux distributions and related platforms. Mitigations document...

CVE-2020-36521

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud for Windows 11.4, iOS 14.0 and iPadOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9. Processing a maliciously crafted tiff file may lead to a denial-of-service or...

CVE-2022-22628

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2020-36521

CVE-2020-36521 is an out-of-bounds read in the ImageIO path triggered by processing a malicious TIFF, fixed via input validation improvements. Affected products include Apple iCloud for Windows (11.4 and 7.21) and iOS/iPadOS 14.0+, watchOS 7.0, tvOS 14.0, and iTunes for Windows 12.10.9. Impact pe...

CVE-2022-22628

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-22628

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-22610

CVE-2022-22610 involves a memory corruption issue addressed with improved state management. The vulnerability is fixed in macOS Monterey 12.3 and corresponding Apple software updates: Safari 15.4, watchOS 8.5, iOS 15.4, iPadOS 15.4, and tvOS 15.4. Exploitation would occur by processing maliciousl...

CVE-2022-22637

CVE-2022-22637 is a WebKit-related issue reported by Apple, described as a logic issue in state management that could cause unexpected cross-origin behavior. Affected components: WebKit used by Safari on macOS (Monterey 12.3, Safari 15.4) and iOS/tvOS/iPadOS platforms; root cause: logic/state man...

CVE-2022-22637

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior...

CVE-2022-22637

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior...

CVE-2022-22637

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior...

CVE-2022-32814

A type confusion issue was addressed with improved state handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32814

CVE-2022-32814 describes a type confusion issue that Apple fixed via updated state handling. The NVD entry states the vulnerability could allow an app to execute arbitrary code with kernel privileges. Affected Apple platforms and versions for the fix are: watchOS 8.7, tvOS 15.6, iOS 15.6 and iPad...

CVE-2022-32814

A type confusion issue was addressed with improved state handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges...

多款Apple产品 安全漏洞

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. tvOS is an operating system for smart TVs. watchOs is an operating system for watches used on the Apple Watch. A security vulnerability exists in several Apple products, which could resu...

Apple Security Update: watchOS 9.0.1

Apple recommends to install security update watchOS 9.0.1 on devices Apple Watch Ultra...

CVE-2022-32788

A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. A remote user may be able to cause kernel code execution...

CVE-2022-32788

A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. A remote user may be able to cause kernel code execution...

Buffer overflow

A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. A remote user may be able to cause kernel code execution...