PT-2022-26587 · Apple · Xcode +1

Name of the Vulnerable Software and Affected Versions: Xcode versions prior to 14.1 Description: An injection issue was addressed with improved input validation, which may allow an app to gain root privileges. Recommendations: For versions prior to 14.1, update to Xcode 14.1 to resolve the issue...

Apple Xcode 注入漏洞

Apple Xcode is a set of integrated development environments IDEs provided to developers by Apple, Inc. that are primarily used to develop applications for Mac OS X and iOS. A security vulnerability exists in Apple Xcode versions prior to 14.1, which stems from an injection issue where an...

About the security content of Xcode 14.1

About the security content of Xcode 14.1 This document describes the security content of Xcode 14.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Security update for pyenv (moderate)

openSUSE Security Update: Security update for pyenv Announcement ID: openSUSE-SU-2022:10183-1 Rating: moderate References: 1201582 Cross-References: CVE-2022-35861 CVSS scores: CVE-2022-35861 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 A...

MAL-2022-5452 Malicious code in prerequests-xcode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f673f2526812aa49f591c14312f3dadb212ed691fc55ba3e25ff65352da7409 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prerequests-xcode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f673f2526812aa49f591c14312f3dadb212ed691fc55ba3e25ff65352da7409 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-26747

This issue was addressed with improved checks. This issue is fixed in Xcode 13.4. An app may be able to gain elevated privileges...

CVE-2022-26747

This issue was addressed with improved checks. This issue is fixed in Xcode 13.4. An app may be able to gain elevated privileges...

CVE-2022-26747

This issue was addressed with improved checks. This issue is fixed in Xcode 13.4. An app may be able to gain elevated privileges...

CVE-2022-26747

This issue was addressed with improved checks. This issue is fixed in Xcode 13.4. An app may be able to gain elevated privileges...

CVE-2022-26747

CVE-2022-26747 affects Apple Xcode IDE (macOS Monterey 12) due to a vulnerability in the IDE component where insufficient input checks could allow an app to gain elevated privileges. The issue is addressed in Xcode 13.4; CVSS indicates local exploitation with user interaction required and high im...

CVE-2022-26747: Undefined Security Weakness

This issue was addressed with improved checks. This issue is fixed in Xcode 13.4. An app may be able to gain elevated privileges...

Apple Xcode Security Update (HT213261)

Apple Xcode is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:xcode"; ifdescription...

GHSA-6VVC-C2M3-CJF3 JGit Improper Input Validation vulnerability

Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine; libgit2; Egit; and JGit allow remote Git servers to execute arbitrary commands via a tree...

JGit Improper Input Validation vulnerability

Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine; libgit2; Egit; and JGit allow remote Git servers to execute arbitrary commands via a tree...

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. Note: Apple notes they are aware of a report that states CVE-2022-22675 may have been actively exploited...

Apple Xcode 输入验证错误漏洞

Apple Xcode is a set of integrated development environments IDEs provided to developers by Apple Inc. in the United States, which are primarily used to develop applications for Mac OS X and iOS. Apple Xcode suffers from an input validation error vulnerability that stems from insufficient validati...

About the security content of Xcode 13.4

About the security content of Xcode 13.4 This document describes the security content of Xcode 13.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Apple Xcode out-of-bounds read vulnerability (CNVD-2022-23933)

Apple Xcode is an integrated development environment provided to developers by Apple, Inc. and is primarily used to develop applications for Mac OS X and iOS. Apple Xcode suffers from an out-of-bounds read vulnerability, which stems from a boundary error when processing files in otool and can be...

Apple Xcode out-of-bounds read vulnerability (CNVD-2022-23935)

Apple Xcode is an integrated development environment provided to developers by Apple, Inc. and is primarily used to develop applications for Mac OS X and iOS. Apple Xcode suffers from an out-of-bounds read vulnerability, which stems from a boundary error when processing files in otool and can be...