PT-2022-21492 · Apple +6 · Ipados +11

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 8.7 tvOS versions prior to 15.6 iOS versions prior to 15.6 iPadOS versions prior to 15.6 macOS Monterey versions prior to 12.5 Description: The issue allows UI spoofing when visiting a website that frames malicious...

Mozilla Firefox SQL注入漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation. A SQL injection vulnerability exists in the history tab of Mozilla Firefox for iOS, which originates from the ability to externally specify a search term to trigger an SQL injection...

PT-2022-18015 · Apple · Ios +4

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 8.6 tvOS versions prior to 15.5 iOS versions prior to 15.5 iPadOS versions prior to 15.5 Description: A use after free issue was addressed with improved memory management, which may allow an application to execute...

PT-2022-7003 · Apple +9 · Webkit +14

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.5 iPadOS versions prior to 15.5 macOS Monterey versions prior to 12.4 tvOS versions prior to 15.5 watchOS versions prior to 8.6 Description: A use after free issue was addressed with improved memory management. This...

PT-2022-18039 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 15.5 macOS Monterey versions prior to 12.4 iOS versions prior to 15.5 iPadOS versions prior to 15.5 Description: An out-of-bounds write issue was addressed with improved bounds checking, allowing an application to...

CVE-2022-22667

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges...

DEBIAN-CVE-2022-22620

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 v. 16612.4.9.1.8 and 15612.4.9.1.8. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a...

CVE-2022-22618

This issue was addressed with improved checks. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency SOS passcode prompt...

PT-2022-15603 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.3 iOS versions prior to 15.4 iPadOS versions prior to 15.4 Description: An access issue was addressed with improvements to the sandbox, which may have allowed an app to leak sensitive user information...

PT-2022-15566 · Apple · Macos Catalina +7

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 15.4 Apple iOS versions prior to 15.4 Apple iPadOS versions prior to 15.4 Apple macOS Big Sur versions prior to 11.6.5 Apple macOS Catalina versions prior to Security Update 2022-003 Apple watchOS versions prior t...

CVE-2022-24465

Microsoft Intune Portal for iOS Security Feature Bypass Vulnerability...

Devolutions Password Hub 授权问题漏洞

Devolutions Password Hub is a highly secure, flexible and easy-to-use cloud-based password management solution from Devolutions Canada. A security vulnerability exists in Devolutions Password Hub for iOS versions prior to 2021.3.4, which can be exploited by an attacker to gain access to an...

The vulnerability of the FontParser component in operating systems such as iPadOS, watchOS, iOS, tvOS, and Mac OS allows attackers to disclose protected information.

The vulnerability of the FontParser component in iPadOS, watchOS, iOS, tvOS, and Mac OS operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

PT-2022-15538 · Apple · Macos Catalina +6

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 15.3 Apple iPadOS versions prior to 15.3 Apple tvOS versions prior to 15.3 Apple macOS Catalina versions prior to Security Update 2022-001 Apple macOS Monterey versions prior to 12.2 Apple macOS Big Sur versions...

PT-2022-1532 · Apple +6 · Macos Monterey +14

Name of the Vulnerable Software and Affected Versions: WebKitGTK and WPE WebKit versions prior to the fixed version Safari versions prior to 15.3 iOS versions prior to 15.3 iPadOS versions prior to 15.3 watchOS versions prior to 8.4 tvOS versions prior to 15.3 macOS Monterey versions prior to 12....

Apple iPadOS 输入验证错误漏洞

Apple iPadOS is a suite of operating systems for the iPad tablet computer from Apple USA. An input validation error vulnerability exists in Apple iOS and iPadOS that stems from the handling of maliciously crafted HomeKit accessory names could result in a denial of service...

CVE-2017-13880

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 11.2, watchOS 4.2. An application may be able to execute arbitrary code with kernel privilege...

The vulnerability of the Crash Reporter component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows a hacker to modify any files they desire.

The vulnerability of the Crash Reporter component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify arbitrary files...

The vulnerability of the Identity Service in operating systems such as tvOS, iOS, iPadOS, and watchOS allows a hacker to bypass security restrictions.

The vulnerability of the Identity Service for operating systems tvOS, iOS, iPadOS, and watchOS is related to incorrect code generation. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

The vulnerability of Microsoft Edge browser on the iOS operating system, related to bypassing authentication through spoofing, allows attackers to carry out spoofing attacks.

The vulnerability of Microsoft Edge browser on the iOS operating system is related to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks remotely...