Summary
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen und im schlimmsten Fall das System zu kompromittieren.
Product
Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.
Vulnerabilities 89
-
High 7.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6…
KEV Apr 4, 2022 -
Medium 5.5CVE-2022-22674 Exploited
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input…
KEV Apr 4, 2022 -
Critical 9.8
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catal…
-
Critical 9.8
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An att…
-
Critical 9.8
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An app…
-
High 8.8
This issue was addressed with improved environment sanitization. This issue is fixed in macOS Monterey 12.4. A sandboxe…
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, …
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iP…
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, …
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and …
-
High 8.8CVE-2022-26717 Public exploit
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iO…
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and …
-
High 7.8
A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2022-004 …
-
High 7.8
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4, iOS …
-
High 7.8CVE-2022-26763 Public exploit
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, iOS 15.5 a…
-
High 7.8
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, wat…
-
High 7.8
A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004…
-
High 7.8
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-0…
-
High 7.8
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An …
-
High 7.8
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-004 Catalina, m…
-
High 7.5
Nokogiri affected by zlib's Out-of-bounds Write vulnerability
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
-
High 7.5
Infinite loop in BN_mod_sqrt() reachable when parsing certificates
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…
-
High 7.5
valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
-
High 7.5
This issue was addressed with improved checks. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5,…
-
High 7.3
Heap-based Buffer Overflow in vim/vim
vim is vulnerable to Heap-based Buffer Overflow
-
High 7.1
Out-of-bounds Read in vim/vim
vim is vulnerable to Out-of-bounds Read
-
High 7.1
Out-of-bounds Read in vim/vim
vim is vulnerable to Out-of-bounds Read
-
Medium 6.8
Use After Free in vim/vim
vim is vulnerable to Use After Free
-
Medium 6.8
Use After Free in vim/vim
vim is vulnerable to Use After Free
-
Medium 5.5
Use After Free in vim/vim
vim is vulnerable to Use After Free
-
Medium 5.5
Out-of-bounds Read in vim/vim
vim is vulnerable to Out-of-bounds Read
-
Medium 5.5CVE-2022-26766 Public exploit
A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 1…
-
Medium 5.5
The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 1…
-
Medium 4.7
A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS …
-
Medium 4.7
A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monte…
-
Medium 4.3
A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in ma…
-
Unscored —CVE-2021-44224 EPSS 82%
Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Soc…
-
Unscored —
Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier
A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue af…
-
Unscored —
In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demo…
-
Unscored —CVE-2021-46059 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…
-
Unscored —
A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads…
-
Unscored —
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, wat…
-
Unscored —
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 15.4 and iPad…
-
Unscored —
A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.3. A malicious applicati…
-
Unscored —CVE-2022-22719 EPSS 70%
mod_lua Use of uninitialized value of in r:parsebody
A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.
-
Unscored —
HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier
Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling
-
Unscored —CVE-2022-22721 EPSS 42%
core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody
If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier.
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. A plug-in may be able to inh…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. A plug-in may be able to inh…
-
Unscored —
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-0…
-
Unscored —
An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-00…
-
Unscored —
A race condition was addressed with improved locking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 a…
-
Unscored —
A validation issue existed in the handling of symlinks and was addressed with improved validation of symlinks. This iss…
-
Unscored —
An access issue was addressed with additional sandbox restrictions on third-party applications. This issue is fixed in …
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. An attacker may be able to c…
-
Unscored —CVE-2022-26711 Public exploit
An integer overflow issue was addressed with improved input validation. This issue is fixed in tvOS 15.5, iTunes 12.12.…
-
Unscored —
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.…
-
Unscored —
A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-0…
-
Unscored —
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.4, m…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-0…
-
Unscored —
A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 1…
-
Unscored —
A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 1…
-
Unscored —
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.4, mac…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. Photo location …
-
Unscored —CVE-2022-26726 Public exploit
This issue was addressed with improved checks. This issue is fixed in Security Update 2022-004 Catalina, watchOS 8.6, m…
-
Unscored —
This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Mo…
-
Unscored —
This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Mo…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iP…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monte…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monte…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monte…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monte…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monte…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An app…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An app…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.4. A…
-
Unscored —
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.6.6. A malici…
-
Unscored —
This issue was addressed by removing the vulnerable code. This issue is fixed in Security Update 2022-004 Catalina, mac…
-
Unscored —
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An app…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An app…
-
Unscored —
A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windo…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An app…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An app…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An app…
-
Unscored —
This issue was addressed with improved environment sanitization. This issue is fixed in Security Update 2022-004 Catali…
-
Unscored —
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iP…
Revision history
-
#7
CVE-2022-32794 ergänzt
-
#6
Exploit aufgenommen
-
#5
Korrektur bzgl. fehlerhaft eingetragenem Debian Update
-
#4
Neue Updates von Debian aufgenommen
-
#3
CVE Nummern CVE-2022-32790 und CVE-2022-32882 ergänzt
-
#2
CVE ergänzt
-
#1
Initiale Fassung
References
-
Apple Security Advisory vom 2022-05-16
https://support.apple.com/en-us/HT213255
-
Apple Security Advisory vom 2022-05-16
https://support.apple.com/en-us/HT213256
-
Apple Security Advisory vom 2022-05-16
https://support.apple.com/en-us/HT213257
-
PoC CVE-2022-26726
https://github.com/acheong08/CVE-2022-26726-POC
-
CISA: Apple Releases Security Updates
https://www.cisa.gov/uscert/ncas/current-activity/2022/04/01/apple-releases-security-updates-0
-
Debian Security Advisory DLA-3118 vom 2022-09-22
https://lists.debian.org/debian-lts-announce/2022/09/msg00028.html
-
Wojciech Regula blogpost vom 2022-11-21
https://wojciechregula.blog/post/macos-sandbox-escape-via-terminal/