CVE-2022-32820

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32807

CVE-2022-32807 affects macOS: Catalina, Big Sur (11.6.8) and Monterey (12.5). The issue arises from improper file handling, allowing an app to overwrite arbitrary files. It is tracked with a CVSS v3.1 base score of 7.1 (HIGH) with LOCAL attack vector, low attack complexity, no privileges required...

CVE-2022-32807

This issue was addressed with improved file handling. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to overwrite arbitrary files...

CVE-2022-32815

The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2022-32800

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to modify protected parts of the file system...

CVE-2022-32800

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to modify protected parts of the file system...

CVE-2022-32800

CVE-2022-32800 refers to a vulnerability in macOS where an app may modify protected parts of the file system. The connected sources indicate this was addressed by Apple in Security Update 2022-005, with affected macOS versions including Catalina, Big Sur 11.6.8, and Monterey 12.5. The root cause ...

CVE-2022-32843

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted Postscript file may result in unexpected app termination or disclosure of process memory...

CVE-2022-32843

CVE-2022-32843 is an out-of-bounds write vulnerability addressed by Apple's Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, and macOS Monterey 12.5. Processing a maliciously crafted PostScript file may cause an app to terminate or disclose process memory. Exploitation would be local (att...

CVE-2022-32797

CVE-2022-32797 affects macOS where processing a maliciously crafted AppleScript binary could terminate the process or disclose process memory. Root cause: improved checks now address this issue. Remediation: apply Security Update 2022-005 for Catalina, macOS Big Sur 11.6.8, and macOS Monterey 12....

CVE-2022-32853

CVE-2022-32853 is an out-of-bounds read in processing a malicious AppleScript binary. Affects macOS via AppleScript handling; root cause is improper input validation. Impact described as possible termination or disclosure of process memory. Mitigation: apply Security Update 2022-005 Catalina, mac...

CVE-2022-32786

An issue in the handling of environment variables was addressed with improved validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to modify protected parts of the file system...

CVE-2022-32787

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. Processing maliciously crafted web content may lead to arbitrary code...

CVE-2022-32790

This issue was addressed with improved checks. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, macOS Big Sur 11.6.6, Security Update 2022-004 Catalina. A remote user may be able to cause a denial-of-service...

CVE-2022-32785

CVE-2022-32785 describes a null pointer dereference in Apple’s image processing flow. Public sources (NVD/NASL/PRION references) state this issue is fixed by macOS Monterey 12.5, macOS Big Sur 11.6.8, macOS Security Update 2022-005 Catalina, and iOS 15.6/iPadOS 15.6. The root cause is a null poin...

CVE-2022-39238

CVE-2022-39238 affects Arvados versions prior to 2.4.3. When using PAM for authentication, a user with valid credentials could be granted access even if the account is disabled or not allowed to access the host (e.g., expired password). Other auth methods (LDAP, OpenID Connect) are not affected. ...

big-giant.com Cross Site Scripting vulnerability OBB-2943278

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-32849

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to access sensitive user information...

CVE-2022-32849

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to access sensitive user information...

多款Apple产品 安全漏洞

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. tvOS is an operating system for smart TVs. watchOs is an operating system for watches used on the Apple Watch. A security vulnerability exists in several Apple products, which could resu...