CVE-2022-26731

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious website may be able to track users in Safari private browsing mode...

CVE-2022-26728

This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to access restricted files...

CVE-2022-26727

CVE-2022-26727 affects macOS prior to 12.4/Monterey: fixed by Security Update 2022-004, addressing entitlements to prevent a malicious app from modifying protected filesystem areas. No further exploit details provided in the connected sources.

CVE-2022-26727

This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. A malicious application may be able to modify protected parts of the file system...

CVE-2022-26726

CVE-2022-26726 is an Apple macOS/iOS vulnerability describing an issue where an app may be able to capture a user’s screen. The available connected references consistently state the root cause as a privilege/permission-related flaw resolved by Apple. The fixed versions are explicitly listed: Secu...

CVE-2022-26725

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. Photo location information may persist after it is removed with Preview Inspector...

CVE-2022-26722

Summary (CVE-2022-26722): The memory initialization issue is fixed in Security Update 2022-004 for macOS Catalina, macOS Monterey 12.4, and macOS Big Sur 11.6.6. The vulnerability could allow a malicious application to gain root privileges. Publicly available connected documents confirm the same ...

CVE-2022-26721

A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to gain root privileges...

CVE-2022-26721

Technical details about CVE-2022-26721 are not publicly provided in the supplied documents; monitor for updates.

CVE-2022-26720

CVE-2022-26720 is an out-of-bounds write vulnerability resolved by Security Update 2022-004 for macOS Catalina, Monterey 12.4, and Big Sur 11.6.6. The issue allows a malicious application to potentially execute arbitrary code with kernel privileges due to improved bounds checking. Affected platfo...

CVE-2022-26718

CVE-2022-26718 is an out-of-bounds read issue in macOS components that was mitigated by input validation fixes. Public details show the vulnerability affects macOS Big Sur 11.6.6 and macOS Monterey 12.4, with the potential consequence of an application gaining elevated privileges. The CVSS v3.1 v...

CVE-2022-26708

CVE-2022-26708 : The vulnerability is described as a fix for an issue that could allow unexpected application termination or arbitrary code execution, addressed in macOS Monterey 12.4. Connected documents corroborate that macOS Monterey 12.4 contains the fix; no concrete details about affected pr...

CVE-2022-26704

CVE-2022-26704 concerns a validation issue in the handling of symlinks. The root cause is improved validation of symlinks, addressing a path where an app could gain elevated privileges. The vulnerability is fixed in macOS Monterey 12.4. In public disclosures, the issue is described as a local pri...

CVE-2022-26701

A race condition was addressed with improved locking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges...

CVE-2022-26698

CVE-2022-26698 is an out-of-bounds read in the processing of a maliciously crafted AppleScript binary. Root cause: insufficient bounds checking in the affected AppleScript handling. Affected platforms and fixes per documents: macOS Catalina via Security Update 2022-004; macOS Monterey 12.4; macOS...

CVE-2022-26697

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of...

CVE-2022-26697

CVE-2022-26697 describes an out-of-bounds read issue in macOS components where processing a maliciously crafted AppleScript binary could terminate the application or disclose process memory. The common public record confirms the root cause as an out-of-bounds read with memory disclosure implicati...

CVE-2022-26694

CVE-2022-26694 affects macOS Monterey (and related Apple advisories) where a plug-in could inherit the host application's permissions and access user data. The issue was mitigated by improved checks and is fixed in macOS Monterey 12.4. The primary affected surface is plug-in handling within the m...

CVE-2022-26688

An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious app with root privileges may be able to modify the contents of system files...

CVE-2022-22676

An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may be able to delete files for which it does not have permission...