108 matches found
CVE-2022-32818
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5. An app may be able to leak sensitive kernel state...
CVE-2022-32818
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5. An app may be able to leak sensitive kernel state...
CVE-2022-32818
CVE-2022-32818 affects macOS Monterey with a memory handling issue that could allow an app to leak sensitive kernel state. The vulnerability is described as fixed in macOS Monterey 12.5, with impact limited to local attackers (attack vector: LOCAL; privileges: NONE; user interaction required). Th...
About the security content of iOS 16
About the security content of iOS 16 This document describes the security content of iOS 16. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent...
PT-2022-21494 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 Description: The issue was addressed with improved memory handling. An app may be able to leak sensitive kernel state. Recommendations: For versions prior to 12.5, update to macOS Monterey 12.5 to resolve the issu...
Microsoft Windows NtUserMagSetContextInformation Kernel State Corruption Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...
Host crash due to failure to correctly validate PV kernel execution state
ISSUE DESCRIPTION Cannot specify user mode execution without specifying user-mode pagetables. Failure to validate this allows a malicious or buggy 64 bit PV guest to crash the host. nb: predates vulnerability handling process and therefore no formal announcement...
