CVE-2022-26688

An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious app with root privileges may be able to modify the contents of system files...

CVE-2022-26688

CVE-2022-26688 refers to a vulnerability in handling of symlinks in PackageKit on macOS. The issue could allow a malicious, root-privileged app to modify contents of system files, representing a local privilege-escalation risk. Apple patched this in Security Update 2022-003 for Catalina and in ma...

CVE-2022-22676

An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may be able to delete files for which it does not have permission...

CVE-2022-22676

CVE-2022-22676 describes an event handler validation issue in the XPC Services API. The vulnerability was addressed by removing the vulnerable service, and is fixed in macOS Monterey 12.2. The impact is that an application may be able to delete files for which it does not have permission. Remedia...

CVE-2022-22674

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory...

CVE-2022-22674

CVE-2022-22674 involves an out-of-bounds read in the Intel Graphics Driver on macOS, allowing a local attacker to read kernel memory. Apple fixed it with patches in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, and macOS Big Sur 11.6.6 by improving input validation/bounds checks. Ther...

CVE-2022-22672

CVE-2022-22672 : A memory corruption issue was addressed with improved memory handling. It affects Apple platforms and is fixed in iOS 15.4, iPadOS 15.4, Security Update 2022-003 Catalina, macOS Monterey 12.3, and macOS Big Sur 11.6.5. A malicious application may be able to execute arbitrary code...

CVE-2022-22672

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2022-22663

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-004 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.6. A malicious application may bypass Gatekeeper checks...

CVE-2022-22616

CVE-2022-22616 is a Gatekeeper bypass affecting macOS released by Apple. The issue arises when a maliciously crafted ZIP archive bypasses Gatekeeper checks due to insufficient validation in the quarantine/policy enforcement path. Apple fixed this with Security Update 2022-003 for Catalina and wit...

Apple macOS Monterey 输入验证错误漏洞

Apple macOS Monterey is the 18th major version of Apple's macOS for the Macintosh desktop operating system. A security vulnerability exists in Apple macOS Monterey. An attacker has exploited the vulnerability to delete files to which it does not have permission...

CVE-2022-22674

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory. Recent...

Apple macOS 授权问题漏洞

Apple macOS and others are products of Apple Inc. in the United States. apple macOS is a suite of specialized operating systems developed specifically for Mac computers. apple macOS Catalina is a suite of specialized operating systems developed specifically for Mac computers. apple macOS Big Sur ...

Apple Xcode Security Update (HT213261)

Apple Xcode is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:xcode"; ifdescription...

Showdoc 2.10.3 - Stored Cross-Site Scripting (XSS)

Exploit Title: Showdoc 2.10.3 - Stored Cross-Site Scripting XSS Exploit Author: Akshay Ravi Vendor Homepage: https://github.com/star7th/showdoc Software Link: https://github.com/star7th/showdoc/releases/tag/v2.10.3 Version: alert1" 2. Login to showdoc v2.10.2 and go to file library Endpoint =...

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. Note: Apple notes they are aware of a report that states CVE-2022-22675 may have been actively exploited...

Showdoc 2.10.3 Cross Site Scripting

Exploit Title: Showdoc 2.10.3 - Stored Cross-Site Scripting XSS Exploit Author: Akshay Ravi Vendor Homepage: https://github.com/star7th/showdoc Software Link: https://github.com/star7th/showdoc/releases/tag/v2.10.3 Version: alert1" 2. Login to showdoc v2.10.2 and go to file library Endpoint =...

Vulnerabilities fixed in Apple macOS

Apple has fixed multiple vulnerabilities in macOS Monterey, Big Sur and Catalina. The vulnerabilities allow a malicious person to able to perform attacks that result in the following categories of damage: Denial-of-Service DoS. Remote code execution Kernel/Root permissions Remote code execution...

Apple macOS Monterey 权限许可和访问控制问题漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. Apple macOS Monterey versions 12.0 21A344 - 12.3.1 21E258 have a privilege-granting and access-control issue vulnerability that stems from a plug-in that may be able to inherit an...

PT-2022-21462 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 Description: The issue allows an app with root privileges to potentially access private information. This was addressed by enabling hardened runtime. Recommendations: For versions prior to 12.4, update to macOS...