PT-2022-21578 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16 macOS versions prior to 13 Description: The issue allows an app to bypass Privacy preferences, which was addressed with improved data protection. Recommendations: For iOS versions prior to 16, update to iOS 16 to...

PT-2022-28138 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue allows an app to modify protected parts of the file system. This was addressed with improved data protection. Recommendations: For versions prior to 13, update to macOS Ventura 13 to resolve t...

PT-2022-7233 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue is related to improper access control in the macOS operating system's Sandbox component. An app with root privileges may be able to access private information due to this issue. The estimated...

PT-2022-21559 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.7 iPadOS versions prior to 15.7 iOS version 16 and later are not affected, but versions prior to 16 are vulnerable if earlier than 15.7 macOS versions prior to Ventura 13 watchOS versions prior to 9 Description: The...

PT-2022-26602 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: A logic issue was addressed with improved checks, which may have allowed an app to access user-sensitive data. Recommendations: For versions prior to 13, update to macOS Ventura 13 to resolve the issue...

PT-2022-26617 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue concerns an app's access to camera data. A camera extension may be able to continue receiving video after the app that activated it was closed. This is due to a problem with the logic...

PT-2022-26603 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue allows an app to potentially access user-sensitive data due to inadequate data protection mechanisms. This has been addressed with improved data protection. Recommendations: For versions prior...

PT-2022-21538 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16 macOS versions prior to 13 Description: The issue allows a user with physical access to an iOS device to read past diagnostic logs. This was addressed with improved data protection. Recommendations: For iOS versions...

PT-2022-7249 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue is related to a buffer overflow in memory, which can allow an attacker to execute arbitrary code with kernel privileges. The problem was addressed with improved memory handling. An app may be...

PT-2022-18013 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: A logic issue was addressed with improved state management, which may allow an app to cause a denial-of-service to Endpoint Security clients. Recommendations: For versions prior to 13, update to macOS...

PT-2022-7234 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Ventura 13 Description: The issue is related to insufficient access control in the APFS component of the macOS operating system. Exploitation of this issue may allow an attacker to disclose protected information. An ap...

F5 BIG-IP 资源管理错误漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A resource management error vulnerability exists in all versions of F5 BIG-IP 13.1.x. The vulnerability stems from an...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A security vulnerability exists in F5 BIG-IP versions 17.0.x through 17.0.0.1 prior, 16.1.x through 16.1.3.2 prior, 15.1.x...

F5 BIG-IP 命令注入漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other functions from F5 Corporation in the United States. A command injection vulnerability exists in F5 BIG-IP versions 16.1.x through 16.1.3.1 prior,...

CVE-2022-20420

In getBackgroundRestrictionExemptionReason of AppRestrictionController.java, there is a possible way to bypass device policy restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

CVE-2022-20418

In pickStartSeq of AAVCAssembler.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...

CVE-2022-20412

In fdtnexttag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12...

CVE-2022-20417

In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...

CVE-2022-20413

In start of Threads.cpp, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

CVE-2022-20417

In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...