cve.bz

apple macos vulnerabilities, newest first, page 51

Filter
  1. 7.5CVE-2022-32793EPSS 1.1%

    Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to disclose kernel memory.

  2. 9.8CVE-2022-37434EPSS 19%

    zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affe…

  3. 8.8CVE-2022-2294KEVEPSS 71%

    Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  4. 5.9CVE-2022-32208EPSS 8.4%

    When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.

  5. 9.8CVE-2022-32207EPSS 12%

    When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accident…

  6. 4.3CVE-2022-32205EPSS 31%

    A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large amount of (big) cookies make subsequent HTTP requests to this, or other servers t…

  7. 7.8CVE-2022-1720EPSS 2.2%

    Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

  8. 7.8CVE-2022-2126EPSS 1.6%

    Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

  9. 7.8CVE-2022-2125EPSS 1.6%

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  10. 7.8CVE-2022-2124EPSS 1.6%

    Buffer Over-read in GitHub repository vim/vim prior to 8.2.

  11. 7.8CVE-2022-2042EPSS 1.5%

    Use After Free in GitHub repository vim/vim prior to 8.2.

  12. 7.8CVE-2022-2000EPSS 1.6%

    Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

  13. 7.8CVE-2022-1968EPSS 1.4%

    Use After Free in GitHub repository vim/vim prior to 8.2.

  14. 7.8CVE-2022-1942EPSS 1.6%

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  15. 7.8CVE-2022-1927EPSS 1.7%

    Buffer Over-read in GitHub repository vim/vim prior to 8.2.

  16. 7.8CVE-2022-1897EPSS 1.5%

    Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

  17. 7.8CVE-2022-1898EPSS 1.5%

    Use After Free in GitHub repository vim/vim prior to 8.2.

  18. 9.8CVE-2022-26776EPSS 2.2%

    This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to cause unexpected application termination or arbitrary code execution.

  19. 9.8CVE-2022-26775EPSS 2.1%

    An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An attacker may be able to cause unexpected application termination or arbitrary code executio…

  20. 7.8CVE-2022-26772EPSS 0.9%

    A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

  21. 7.8CVE-2022-26770EPSS 1.1%

    An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code wi…

  22. 7.8CVE-2022-26769EPSS 1.1%

    A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with…

  23. 7.8CVE-2022-26768EPSS 1.4%

    A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, watchOS 8.6, tvOS 15.5, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.

  24. 5.5CVE-2022-26767EPSS 0.6%

    The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences.

  25. 5.5CVE-2022-26766EPSS 2.8%

    A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious app may be a…

  26. 4.7CVE-2022-26765EPSS 0.2%

    A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious attacker with arbitrary read and write capability may be able to bypass …

  27. 4.7CVE-2022-26764EPSS 0.9%

    A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An attacker that has already achieved kernel code execution may be able to bypa…

  28. 7.8CVE-2022-26763EPSS 3.9%

    An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious a…

  29. 7.8CVE-2022-26761EPSS 1.0%

    A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.

  30. 7.8CVE-2022-26757EPSS 3.1%

    A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may…

  31. 7.8CVE-2022-26756EPSS 1.1%

    An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kerne…

  32. 6.3CVE-2022-26755EPSS 0.8%

    This issue was addressed with improved environment sanitization. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to break out of its sandbox.

  33. 7.8CVE-2022-26754EPSS 1.0%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

  34. 7.8CVE-2022-26753EPSS 1.0%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

  35. 7.8CVE-2022-26752EPSS 1.0%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

  36. 7.8CVE-2022-26751EPSS 1.8%

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a…

  37. 7.8CVE-2022-26750EPSS 1.0%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

  38. 7.8CVE-2022-26749EPSS 1.0%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

  39. 8.8CVE-2022-26748EPSS 1.5%

    An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing maliciously crafted web content may lead to arbitrar…

  40. 5.5CVE-2022-26746EPSS 0.7%

    This issue was addressed by removing the vulnerable code. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences.

  41. 5.5CVE-2022-26745EPSS 0.6%

    A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.6.6. A malicious application may disclose restricted memory.

  42. 7.0CVE-2022-26743EPSS 0.2%

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.4. An attacker that has already achieved code execution in macOS Recovery may be able to escalate to kernel privileges.

  43. 7.8CVE-2022-26742EPSS 1.0%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

  44. 7.8CVE-2022-26741EPSS 1.0%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

  45. 7.8CVE-2022-26740EPSS 1.1%

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

  46. 7.8CVE-2022-26739EPSS 1.1%

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

  47. 7.8CVE-2022-26738EPSS 1.1%

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

  48. 7.8CVE-2022-26737EPSS 1.1%

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

  49. 7.8CVE-2022-26736EPSS 1.2%

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

  50. 4.3CVE-2022-26731EPSS 0.9%

    A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious website may be able to track users in Safari private browsing mode.