CVE-2022-26706: Undefined Security Weakness

An access issue was addressed with additional sandbox restrictions on third-party applications. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2022-26766: Improper Certificate Validation

A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious app may be able to bypass signature validation...

Apple Security Update: tvOS 15.5.1

Apple recommends to install security update tvOS 15.5.1 on devices Apple TV 4K, Apple TV 4K 2nd generation, and Apple TV HD...

Apple Multiple Products Memory Corruption Vulnerability

Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation...

Apple tvOS licensing issue vulnerability

Apple tvOS is a smart TV operating system from Apple, Inc. Apple tvOS is vulnerable to an authorization issue stemming from improper AuthKit privilege management, which can be exploited by local attackers to bypass the authentication process...

Update now! Apple patches zero-day vulnerability affecting Macs, Apple Watch, and Apple TV

Apple has released security updates for a zero-day vulnerability that affects multiple products, including Mac, Apple Watch, and Apple TV. The flaw is an out-of-bounds write issue—tracked as CVE-2022-22675—in AppleAVD, a decoder that handles specific media files. An out-of-bounds write or read fl...

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. Note: Apple notes they are aware of a report that states CVE-2022-22675 may have been actively exploited...

PT-2022-18037 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 15.5 macOS Monterey versions prior to 12.4 iOS versions prior to 15.5 iPadOS versions prior to 15.5 Description: An out-of-bounds write issue was addressed with improved bounds checking, allowing an application to...

Apple tvOS 缓冲区错误漏洞

Apple tvOS is an operating system for Smart TVs from Apple. Apple tvOS suffers from a buffer error vulnerability that stems from a boundary error in WebKit's handling of HTML content. A remote attacker could trick a victim into visiting a specially crafted website, trigger a memory corruption, an...

About the security content of tvOS 15.5

About the security content of tvOS 15.5 This document describes the security content of tvOS 15.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Apple tvOS 输入验证错误漏洞

Apple tvOS is a smart TV operating system from Apple, Inc. An input validation error vulnerability exists in Apple tvOS versions 15.0 19J346 - 15.4.1 19L452, which stems from an integer overflow in ImageIO. A remote attacker could exploit this vulnerability to execute arbitrary code on the target...

PT-2022-3415 · Apple +8 · Ipados +14

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 15.5 Apple iOS versions prior to 15.5 Apple iPadOS versions prior to 15.5 Apple watchOS versions prior to 8.6 Apple macOS Monterey versions prior to 12.4 Apple Safari versions prior to 15.5 Description: A memory...

Apple tvOS 缓冲区错误漏洞

Apple tvOS is a set of smart TV operating systems from Apple USA. A buffer error vulnerability exists in Apple tvOS versions 15.0 19J346 through 15.4.1 19L452, which stems from a boundary error in IOSurfaceAccelerator. A native application can exploit the vulnerability to execute arbitrary code...

PT-2022-18060 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 15.5 iOS versions prior to 15.5 iPadOS versions prior to 15.5 macOS Big Sur versions prior to 11.6.6 macOS Monterey versions prior to 12.4 watchOS versions prior to 8.6 macOS Catalina versions prior to Security Update...

Apple tvOS 资源管理错误漏洞

Apple tvOS is a smart TV operating system from Apple, Inc. A resource management error vulnerability exists in Apple tvOS versions 15.0 19J346 - 15.4.1 19L452, which originates from a use-after-release error when processing HTML content in WebKit. A remote attacker could exploit this vulnerabilit...

AlmaLinux 8 : webkit2gtk3 (ALSA-2022:1777)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:1777 advisory. - A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15...

PT-2022-3419 · Apple +8 · Ipados +13

Name of the Vulnerable Software and Affected Versions: WebKitGTK and WPE WebKit versions affected versions not specified tvOS versions prior to 15.5 iOS versions prior to 15.5 iPadOS versions prior to 15.5 watchOS versions prior to 8.6 macOS Monterey versions prior to 12.4 Safari versions prior t...

CVE-2022-22629

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-22624

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web content may lead to arbitrary code execution...

Update now! Apple patches two zero-day vulnerabilities that may have been actively exploited

Apple has released security updates for macOS Monterey 12.3.1, iOS 15.4.1, iPadOS 15.4.1, tvOS 15.4.1, and watchOS 8.5.1. The update patches two vulnerabilities about which the advisory states that Apple is aware of a report that this issue may have been actively exploited for both vulnerabilitie...