CVE-2022-26728

This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to access restricted files...

CVE-2022-26726

CVE-2022-26726 is an Apple macOS/iOS vulnerability describing an issue where an app may be able to capture a user’s screen. The available connected references consistently state the root cause as a privilege/permission-related flaw resolved by Apple. The fixed versions are explicitly listed: Secu...

CVE-2022-26726

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-004 Catalina, watchOS 8.6, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to capture a user's screen...

CVE-2022-26722

Summary (CVE-2022-26722): The memory initialization issue is fixed in Security Update 2022-004 for macOS Catalina, macOS Monterey 12.4, and macOS Big Sur 11.6.6. The vulnerability could allow a malicious application to gain root privileges. Publicly available connected documents confirm the same ...

CVE-2022-26721

A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to gain root privileges...

CVE-2022-26721

Technical details about CVE-2022-26721 are not publicly provided in the supplied documents; monitor for updates.

CVE-2022-26720

CVE-2022-26720 is an out-of-bounds write vulnerability resolved by Security Update 2022-004 for macOS Catalina, Monterey 12.4, and Big Sur 11.6.6. The issue allows a malicious application to potentially execute arbitrary code with kernel privileges due to improved bounds checking. Affected platfo...

CVE-2022-26718

CVE-2022-26718 is an out-of-bounds read issue in macOS components that was mitigated by input validation fixes. Public details show the vulnerability affects macOS Big Sur 11.6.6 and macOS Monterey 12.4, with the potential consequence of an application gaining elevated privileges. The CVSS v3.1 v...

CVE-2022-26712

CVE-2022-26712 involves removal of vulnerable code that allowed bypassing macOS System Integrity Protection (SIP), enabling a malicious app to modify protected filesystem areas. Affected products include macOS Big Sur 11.6.6 and macOS Monterey 12.4 (per NVD). The issue is fixed in these versions ...

CVE-2022-26712

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to modify protected parts of the file system...

CVE-2022-26698

CVE-2022-26698 is an out-of-bounds read in the processing of a maliciously crafted AppleScript binary. Root cause: insufficient bounds checking in the affected AppleScript handling. Affected platforms and fixes per documents: macOS Catalina via Security Update 2022-004; macOS Monterey 12.4; macOS...

CVE-2022-26697

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of...

CVE-2022-26697

CVE-2022-26697 describes an out-of-bounds read issue in macOS components where processing a maliciously crafted AppleScript binary could terminate the application or disclose process memory. The common public record confirms the root cause as an out-of-bounds read with memory disclosure implicati...

CVE-2022-26688

An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious app with root privileges may be able to modify the contents of system files...

DEBIAN-CVE-2022-26691

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges...

ALPINE-CVE-2022-26691

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges...

CVE-2022-22672

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2022-26688

An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious app with root privileges may be able to modify the contents of system files...

CVE-2022-22674

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory...

CVE-2022-22663

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-004 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.6. A malicious application may bypass Gatekeeper checks...