PT-2022-27970 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.1 iOS versions prior to 16.2 iPadOS versions prior to 16.2 Description: A logic issue was addressed with improved state management. The Private Relay functionality did not match system settings...

PT-2022-7574 · Apple +7 · Icloud For Windows +14

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16.2 tvOS versions prior to 16.2 iCloud for Windows versions prior to 14.1 iOS versions prior to 15.7.2 and 16.2 iPadOS versions prior to 15.7.2 and 16.2 macOS Ventura versions prior to 13.1 watchOS versions prior to...

PT-2022-7579 · Apple +7 · Macos Ventura +13

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16.2 tvOS versions prior to 16.2 macOS Ventura versions prior to 13.1 iOS versions prior to 15.7.2 and prior to 16.2 iPadOS versions prior to 15.7.2 and prior to 16.2 watchOS versions prior to 9.2 Description: The iss...

PT-2022-27964 · Apple +4 · Ipados +8

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16.2 iOS versions prior to 16.2 iPadOS versions prior to 16.2 macOS Ventura versions prior to 13.1 Description: A spoofing issue existed in the handling of URLs, which could lead to address bar spoofing when visiting ...

PT-2022-27954 · Apple · Macos Ventura +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.2 iPadOS versions prior to 16.2 macOS Ventura versions prior to 13.1 tvOS versions prior to 16.2 watchOS versions prior to 9.2 Description: An out-of-bounds write issue was addressed with improved input validation. Th...

VulnCheck KEV: CVE-2022-42846

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2. Parsing a maliciously crafted video file may lead to unexpected system termination...

PT-2022-27973 · Apple +4 · Ios +6

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.4 iPadOS versions prior to 16.4 Description: A spoofing issue existed in the handling of URLs, which was addressed with improved input validation. Visiting a malicious website may lead to address bar spoofing...

PT-2022-26639 · Apple · Macos Ventura +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.2 iPadOS versions prior to 16.2 macOS Ventura versions prior to 13.1 tvOS versions prior to 16.2 watchOS versions prior to 9.2 Description: The issue allows an app to bypass Privacy preferences. It was addressed by...

CVE-2022-43263

A cross-site scripting XSS vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the name of an uploaded file...

CVE-2022-43264

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request...

Cross site scripting

A cross-site scripting XSS vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the name of an uploaded file...

Directory traversal

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request...

CVE-2022-43263

A cross-site scripting XSS vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the name of an uploaded file...

PT-2022-26818 · Arobas Music · Arobas Music Guitar Pro

Name of the Vulnerable Software and Affected Versions: Arobas Music Guitar Pro for iPad and iPhone versions prior to 1.10.2 Description: The issue allows attackers to perform directory traversal and download arbitrary files via a crafted web request. Recommendations: For versions prior to 1.10.2,...

CVE-2022-43264

CVE-2022-43264 affects Arobas Music Guitar Pro for iPad and iPhone prior to 1.10.2. The issue allows directory traversal and arbitrary file download via a crafted web request, leaking sensitive data (confidentiality impact high). Root cause described in sources as a path traversal flaw in the web...

CVE-2022-43263

Arobas Music Guitar Pro for iPad/iPhone is affected by a cross-site scripting (XSS) vulnerability in versions prior to 1.10.2. The issue allows an attacker to inject arbitrary web scripts or HTML by crafting the name of a file uploaded to the app. The root cause is tied to handling of uploaded fi...

CVE-2022-42832

A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2022-42830

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2022-42803

A race condition was addressed with improved locking. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-42806

A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges...