CVE-2022-22587

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may...

CVE-2022-22585

An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access a user's files...

CVE-2022-22583

CVE-2022-22583 describes a permissions issue in macOS where improved validation fixes allow an application to access restricted files. The vulnerability is addressed in Security Update 2022-001 for Catalina, macOS Monterey 12.2, and macOS Big Sur 11.6.3. The initial entry notes a local-permission...

CVE-2022-22579

CVE-2022-22579 is an information-disclosure vulnerability in Apple macOS components (Model I/O) caused by improper state management. Publicly referenced in macOS advisories HT213054 (macOS 12.x before 12.2) and HT213055 (macOS 11.x before 11.6.3), with fixed updates described as Security Update 2...

CVE-2022-22620

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 v. 16612.4.9.1.8 and 15612.4.9.1.8. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a...

CVE-2022-22643

This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. A user may send audio and video in a FaceTime call without knowing that they have done so...

Apple Xcode Security Update (HT213189)

Apple Xcode is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:xcode"; ifdescription...

PT-2022-15589 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 15.4 Apple iOS versions prior to 15.4 Apple iPadOS versions prior to 15.4 Apple macOS Monterey versions prior to 12.3 Apple watchOS versions prior to 8.5 Description: A memory corruption issue was addressed with...

PT-2022-15603 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.3 iOS versions prior to 15.4 iPadOS versions prior to 15.4 Description: An access issue was addressed with improvements to the sandbox, which may have allowed an app to leak sensitive user information...

PT-2022-15563 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.3 Safari versions prior to 15.4 watchOS versions prior to 8.5 iOS versions prior to 15.4 iPadOS versions prior to 15.4 tvOS versions prior to 15.4 Description: A memory corruption issue was addressed with...

PT-2022-15611 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.4 iPadOS versions prior to 15.4 macOS Big Sur versions prior to 11.6.6 macOS Monterey versions prior to 12.3 macOS Catalina versions prior to Security Update 2022-004 Description: A malicious application may bypass...

PT-2022-15578 · Apple · Applescript +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.5 macOS Monterey versions prior to 12.3 macOS Catalina versions prior to Security Update 2022-003 Description: An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously...

Apple macOS Monterey 安全漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A security vulnerability exists in Apple macOS Monterey versions prior to 12.3, which stems from an error in the System Preferences feature. Native applications can spoof system notificatio...

PT-2022-7556 · Apple +8 · Ipados +13

Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.3 Safari versions prior to 15.4 watchOS versions prior to 8.5 iOS versions prior to 15.4 iPadOS versions prior to 15.4 tvOS versions prior to 15.4 WebKitGTK affected versions not specified WPE WebKit affect...

About the security content of macOS Monterey 12.3

About the security content of macOS Monterey 12.3 This document describes the security content of macOS Monterey 12.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

Apple macOS Monterey 缓冲区错误漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. Apple macOS Monterey versions prior to 12.3 suffer from a buffer error vulnerability that stems from a boundary error when processing a file in GarageBand MIDI. A remote attacker could crea...

PT-2022-15610 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.5 macOS Monterey versions prior to 12.3 macOS Catalina versions without Security Update 2022-003 Description: A type confusion issue was addressed with improved state handling, allowing an application to potential...

Apple macOS Monterey 资源管理错误漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A resource management error vulnerability exists in the Apple macOS Monterey AMD module, which arises from an application that may be able to execute arbitrary code with kernel privileges...

About the security content of Xcode 13.3

About the security content of Xcode 13.3 This document describes the security content of Xcode 13.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

SUSE SLES12 Security Update : webkit2gtk3 (SUSE-SU-2022:0811-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0811-1 advisory. - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS...