CVE-2022-22611

CVE-2022-22611 is an Apple vulnerability in ImageIO where processing a maliciously crafted image triggers an out-of-bounds read, addressed by input validation improvements. Affected products include tvOS, iOS, iPadOS, watchOS, macOS Monterey, and iTunes for Windows; fixed in tvOS 15.4, iOS 15.4, ...

CVE-2022-22599

CVE-2022-22599 describes a permissions issue that could let a person with physical access to a device use Siri to obtain some location information from the lock screen. The issue is mitigated by updates: watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, and macOS Monterey 12.3 include ...

CVE-2022-22600

The issue was addressed with improved permissions logic. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. A malicious application may be able to bypass certain Privacy preferences...

CVE-2022-22592

CVE-2022-22592 is a WebKit/WebKitGTK logic issue (state management) that may allow malicious web content to bypass or prevent enforcement of Content Security Policy. In the connected advisories, the vulnerability is cited across multiple ecosystems: Apple platforms (WebKit/WebKitGPU stack) with f...

CVE-2022-22592

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may prevent Content Security Policy from being enforced...

CVE-2022-22594

CVE-2022-22594 describes a cross-origin data exfiltration issue in WebKit/WebKitGTK via cross-origin tracking, later fixed in Safari 15.3, iOS 15.3, iPadOS 15.3, watchOS 8.4, tvOS 15.3, and macOS Monterey 12.2. The connected documents indicate the vulnerability allowed tracking of sensitive user ...

CVE-2022-22594

A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information...

CVE-2022-22598

CVE-2022-22598 affects Apple's CoreMedia in iOS 15.4 and iPadOS 15.4. An app could learn information about the current camera view before obtaining camera access due to an access-control logic issue. Apple fixed this with iOS 15.4 / iPadOS 15.4, and Red Hat/NCSC references corroborate the camera-...

CVE-2022-22593

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. A malicious application may be able to execute arbitrary code with kernel...

CVE-2022-22596

A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges...

CVE-2022-22593

Technical details about CVE-2022-22593 are not publicly provided in the supplied documents. No specific affected products, root cause, impact, or fixes beyond the initial description are disclosed. Monitor for updates.

CVE-2022-22596

CVE-2022-22596 covers a memory corruption issue in Apple kernel components that could allow arbitrary code execution with kernel privileges. The vulnerability is addressed by updates in iOS 15.4, iPadOS 15.4, and watchOS 8.5. The initial description notes a memory corruption problem mitigated by ...

CVE-2022-22590

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-22590

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-22590

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-22590

CVE-2022-22590 is a use-after-free in WebKit/WebKitGTK (WebKitGTK/WebKit) that could allow arbitrary code execution when processing malicious web content. Affected lines in connected docs indicate WebKitGTK/WebKit implementations and that Apple fixed the issue in iOS 15.3/iPadOS 15.3/watchOS 8.4/...

CVE-2022-22589

CVE-2022-22589 is a validation issue in WebKit/WebKitGTK where processing a maliciously crafted mail message could lead to running arbitrary JavaScript. The trusted component is WebKit/WebKitGTK in Apple platforms (iOS, iPadOS, watchOS, tvOS, macOS Monterey 12.2+; Safari 15.3) and WebKitGTK for L...

CVE-2022-22589

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript...

CVE-2022-22589

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript...

CVE-2022-22588

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 15.2.1 and iPadOS 15.2.1. Processing a maliciously crafted HomeKit accessory name may cause a denial of service...