Lucene search
+L

736 matches found

Vulnrichment
Vulnrichment
added 2022/12/15 12:0 a.m.8 views

CVE-2022-42821

A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.2, macOS Big Sur 11.7.2, macOS Ventura 13. An app may bypass Gatekeeper checks...

4.9AI score0.03897EPSS
SaveExploits0References5
Apple
Apple
added 2022/12/13 12:0 a.m.263 views

About the security content of macOS Monterey 12.6.2

About the security content of macOS Monterey 12.6.2 This document describes the security content of macOS Monterey 12.6.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

9.8CVSS8.7AI score0.44678EPSS
SaveExploits12References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/12/13 12:0 a.m.51 views

macOS 12.x < 12.6.2 Multiple Vulnerabilities (HT213533)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.6.2. It is, therefore, affected by multiple vulnerabilities: - The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.2, macOS Ventura 13.1. An app may be able to disclose...

9.8CVSS7.8AI score0.44678EPSS
SaveExploits12References18
Tenable Nessus
Tenable Nessus
added 2022/12/13 12:0 a.m.54 views

macOS 11.x < 11.7.2 Multiple Vulnerabilities (HT213534)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.7.2. It is, therefore, affected by multiple vulnerabilities: - This issue was addressed by enabling hardened runtime. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An a...

9.8CVSS8AI score0.44678EPSS
SaveExploits12References14
OSV
OSV
added 2022/11/01 8:15 p.m.4 views

CVE-2022-32910

A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5, Security Update 2022-005 Catalina. An archive may be able to bypass Gatekeeper...

7.5CVSS5.8AI score0.0093EPSS
SaveExploits0References3
NVD
NVD
added 2022/11/01 8:15 p.m.28 views

CVE-2022-32910

A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5, Security Update 2022-005 Catalina. An archive may be able to bypass Gatekeeper...

7.5CVSS0.0093EPSS
SaveExploits0References3
Prion
Prion
added 2022/11/01 8:15 p.m.26 views

Input validation

A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5, Security Update 2022-005 Catalina. An archive may be able to bypass Gatekeeper...

5CVSS7.3AI score0.0093EPSS
SaveExploits0References3Affected Software2
CVE
CVE
added 2022/11/01 12:0 a.m.167 views

CVE-2022-32910

CVE-2022-32910 affects Apple's Archive Utility on macOS Big Sur 11.6.8 and macOS Monterey 12.5 (also Catalina Security Update 2022-005). It is a logic issue that could let a specially crafted archive bypass Gatekeeper checks, potentially allowing an unsigned and unnotarized app to run without use...

7.5CVSS7.3AI score0.0093EPSS
SaveExploits0References3Affected Software2
Vulnrichment
Vulnrichment
added 2022/11/01 12:0 a.m.7 views

CVE-2022-32910

A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5, Security Update 2022-005 Catalina. An archive may be able to bypass Gatekeeper...

6.7AI score0.0093EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/11/01 12:0 a.m.30 views

CVE-2022-32910

A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5, Security Update 2022-005 Catalina. An archive may be able to bypass Gatekeeper...

7.6AI score0.0093EPSS
SaveExploits0References3
The Hacker News
The Hacker News
added 2022/10/06 12:20 p.m.76 views

Details Released for Recently Patched new macOS Archive Utility Vulnerability

Security researchers have shared details about a now-addressed security flaw in Apple's macOS operating system that could be potentially exploited to run malicious applications in a manner that can bypass Apple's security measures. The vulnerability, tracked as CVE-2022-32910, is rooted in the...

7.5CVSS1.4AI score0.07749EPSS
SaveExploits1
OSV
OSV
added 2022/09/14 7:23 a.m.6 views

MAL-2022-3276 Malicious code in gatekeeper-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fccddd88d3d49ba86c9c5d9921f46d6e335d4394bb3f28e7510e3ff32a51b946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/09/14 7:23 a.m.6 views

Malicious code in gatekeeper-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fccddd88d3d49ba86c9c5d9921f46d6e335d4394bb3f28e7510e3ff32a51b946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2022/09/06 1:43 p.m.50 views

Moderate: Red Hat Security Advisory: Gatekeeper Operator v0.2 security and container updates

Gatekeeper Operator v0.2 security updates Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

7.5CVSS6.9AI score0.01885EPSS
SaveExploits4References11
ATTACKERKB
ATTACKERKB
added 2022/08/11 3:15 p.m.4 views

CVE-2022-20377

In TBD of keymasteripc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Androi...

6.7CVSS5.9AI score0.001EPSS
SaveExploits0References2
Prion
Prion
added 2022/08/11 3:15 p.m.17 views

Design/Logic Flaw

In TBD of keymasteripc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Androi...

4CVSS6.7AI score0.001EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/08/11 12:0 a.m.7 views

PT-2022-14602 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: In the keymaster ipc.cpp, there is a possibility to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no...

6.7CVSS6.5AI score0.001EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/07/27 12:0 a.m.4 views

PT-2022-7701 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.2 macOS versions prior to 12.6.2 macOS versions prior to 13 Description: A logic issue was addressed with improved checks, allowing an app to bypass Gatekeeper checks. The Gatekeeper function automatically checks...

5.5CVSS5.9AI score0.03897EPSS
SaveExploits0References21
Positive Technologies
Positive Technologies
added 2022/07/20 12:0 a.m.4 views

PT-2022-21571 · Apple · Gatekeeper +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.8 macOS Monterey versions prior to 12.5 Security Update versions prior to 2022-005 Catalina Description: A logic issue was addressed with improved checks, allowing an archive to potentially bypass Gatekeeper...

7.5CVSS6.4AI score0.0093EPSS
SaveExploits0References7
Apple
Apple
added 2022/07/20 12:0 a.m.339 views

About the security content of macOS Big Sur 11.6.8

About the security content of macOS Big Sur 11.6.8 This document describes the security content of macOS Big Sur 11.6.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

9.8CVSS8.8AI score0.02996EPSS
SaveExploits4References1Affected Software1
Rows per page
Query Builder