About the security content of tvOS 15.4

About the security content of tvOS 15.4 This document describes the security content of tvOS 15.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

PT-2022-15590

Name of the Vulnerable Software and Affected Versions Apple tvOS versions prior to 15.4 Apple iOS versions prior to 15.4 Apple iPadOS versions prior to 15.4 Apple macOS Monterey versions prior to 12.3 Description A use after free issue was addressed with improved memory management, which may allo...

PT-2022-15581

Name of the Vulnerable Software and Affected Versions Apple tvOS versions prior to 15.4 Apple iOS versions prior to 15.4 Apple iPadOS versions prior to 15.4 Apple macOS Big Sur versions prior to 11.6.5 Apple watchOS versions prior to 8.5 Apple macOS Monterey versions prior to 12.3 Description A...

PT-2022-15564

Name of the Vulnerable Software and Affected Versions tvOS versions prior to 15.4 iOS versions prior to 15.4 iPadOS versions prior to 15.4 iTunes versions prior to 12.12.3 for Windows watchOS versions prior to 8.5 macOS Monterey versions prior to 12.3 Description An out-of-bounds read issue was...

PT-2022-15561

Name of the Vulnerable Software and Affected Versions Apple tvOS versions prior to 15.4 Apple iOS versions prior to 15.4 Apple iPadOS versions prior to 15.4 Apple macOS Monterey versions prior to 12.3 Apple watchOS versions prior to 8.5 Description The issue allows a malicious application to read...

PT-2022-15552

Name of the Vulnerable Software and Affected Versions Apple tvOS versions prior to 15.4 Apple iOS versions prior to 15.4 Apple iPadOS versions prior to 15.4 Apple macOS Monterey versions prior to 12.3 Apple watchOS versions prior to 8.5 Description The issue allows a malicious application to bypa...

PT-2022-15563 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.3 Safari versions prior to 15.4 watchOS versions prior to 8.5 iOS versions prior to 15.4 iPadOS versions prior to 15.4 tvOS versions prior to 15.4 Description: A memory corruption issue was addressed with...

PT-2022-7556 · Apple +8 · Ipados +13

Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.3 Safari versions prior to 15.4 watchOS versions prior to 8.5 iOS versions prior to 15.4 iPadOS versions prior to 15.4 tvOS versions prior to 15.4 WebKitGTK affected versions not specified WPE WebKit affect...

PT-2022-7555 · Apple +8 · Ipados +12

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.3 iOS versions prior to 15.4 iPadOS versions prior to 15.4 tvOS versions prior to 15.4 Safari versions prior to 15.4 Description: A use after free issue was addressed with improved memory management. This issue may...

Debian DSA-5084-1 : wpewebkit - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5084 advisory. - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 v...

CVE-2022-22590

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-22592

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may prevent Content Security Policy from being enforced...

CVE-2022-22589

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript...

UBUNTU-CVE-2022-22589

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript...

AlmaLinux 8 : GNOME (ALSA-2021:4381)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4381 advisory. - A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lea...

The vulnerability of the FontParser component in operating systems such as iPadOS, watchOS, iOS, tvOS, and Mac OS allows a hacker to execute arbitrary code.

The vulnerability of the FontParser component in iPadOS, watchOS, iOS, tvOS, and Mac OS operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious fi...

The vulnerability of operating systems iPadOS, watchOS, iOS, tvOS, and Mac OS, related to security configuration errors, allows attackers to modify arbitrary files.

The vulnerabilities of operating systems iPadOS, watchOS, iOS, tvOS, and Mac OS are related to security configuration errors. Exploiting these vulnerabilities can allow attackers to modify arbitrary files...

The vulnerability of operating systems iPadOS, watchOS, iOS, tvOS, and Mac OS lies in insufficient input data validation, allowing attackers to execute arbitrary code.

The vulnerability of operating systems iPadOS, watchOS, iOS, tvOS, and Mac OS is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

CVE-2022-22594

A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information...

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Apple security pages for the following products and apply the...