Summary
Ein entfernter anonymer, authentisierter, lokaler oder physischer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, , um seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, einen Spoofing-Angriff durchzuführen und beliebigen Code auszuführen.
Product
Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.
Vulnerabilities 65
-
Critical 9.1
When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointe…
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Saf…
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 1…
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safar…
-
High 8.8CVE-2022-22629 Public exploit
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari…
-
High 8.8
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, wa…
-
High 7.5
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or F…
-
High 7.3
Heap-based Buffer Overflow in vim/vim
vim is vulnerable to Heap-based Buffer Overflow
-
High 7.1
Out-of-bounds Read in vim/vim
vim is vulnerable to Out-of-bounds Read
-
High 7.1
Out-of-bounds Read in vim/vim
vim is vulnerable to Out-of-bounds Read
-
Medium 6.8
Use After Free in vim/vim
vim is vulnerable to Use After Free
-
Medium 6.8
Use After Free in vim/vim
vim is vulnerable to Use After Free
-
Medium 6.8
Use After Free in vim/vim
vim is vulnerable to Use After Free
-
Medium 6.8
Heap-based Buffer Overflow in vim/vim
vim is vulnerable to Heap-based Buffer Overflow
-
Medium 5.9
When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS …
-
Medium 5.5
Use After Free in vim/vim
vim is vulnerable to Use After Free
-
Medium 5.5
Out-of-bounds Read in vim/vim
vim is vulnerable to Out-of-bounds Read
-
Unscored —
A Lock Screen issue was addressed with improved state management. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, …
-
Unscored —
libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).
-
Unscored —CVE-2021-46059 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…
-
Unscored —
A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. …
-
Unscored —
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.6.5, macOS Mo…
-
Unscored —
Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 a…
-
Unscored —CVE-2022-22600 Public exploit
The issue was addressed with improved permissions logic. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, ma…
-
Unscored —
The issue was addressed with additional permissions checks. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4,…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPad…
-
Unscored —
A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 15.4, iOS 15.4 and …
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 an…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iP…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iP…
-
Unscored —CVE-2022-22616 Public exploit
This issue was addressed with improved checks. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monter…
-
Unscored —CVE-2022-22623 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6.5, macOS …
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS M…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS M…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.6, macO…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, …
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4,…
-
Unscored —
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.5, iOS 15.4 an…
-
Unscored —
A null pointer dereference was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadO…
-
Unscored —CVE-2022-22639 Public exploit
A logic issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Mont…
-
Unscored —
A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iP…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. A …
-
Unscored —
A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Securi…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Securi…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Securi…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.3. A…
-
Unscored —
An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Monterey 12.3, iOS 15.4 an…
-
Unscored —
An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macO…
-
Unscored —
A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, Gar…
-
Unscored —
This issue was addressed with a new entitlement. This issue is fixed in macOS Monterey 12.3. An app may be able to spoo…
-
Unscored —
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.5, macOS M…
-
Unscored —
A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand …
-
Unscored —
A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.3. A malicious applicati…
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3. An ap…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.4 and iPadOS 15.4,…
-
Unscored —
An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 202…
-
Unscored —
Description: A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.3. A m…
-
Unscored —
A type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022-003 Cata…
Revision history
-
#4
CVE ergänzt
-
#3
CVE ergänzt
-
#2
Exploit aufgenommen
-
#1
Initiale Fassung
References
-
Apple Security Advisory vom 2022-03-14
https://support.apple.com/en-us/HT213183
-
Apple Security Advisory vom 2022-03-14
https://support.apple.com/en-us/HT213184
-
Apple Security Advisory vom 2022-03-14
https://support.apple.com/en-us/HT213185
-
PoC von TrendMicro vom 2022-03-14
https://www.trendmicro.com/en_us/research/22/d/macos-suhelper-root-privilege-escalation-vulnerability-a-deep-di.html