Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, beliebigen Programmcode auszuführen, seine Privilegien zu erweitern, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder sonstige Auswirkungen zu verursachen.
Product
Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.
Vulnerabilities 137
-
Critical 9.8CVE-2022-32207 EPSS 12%
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the…
-
Critical 9.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16.1, iOS 16.1 an…
-
Critical 9.8
A certificate validation issue existed in the handling of WKWebView. This issue was addressed with improved validation.…
-
Critical 9.8
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16…
-
High 8.8
A memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input valid…
-
High 8.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7…
-
High 8.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7, ma…
-
High 8.8
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 a…
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.1, iOS 16.1 and …
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, mac…
-
High 8.8
A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS V…
-
High 8.8
A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13,…
-
High 8.6
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. A sandboxed process may be a…
-
High 8.6
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13. An app may…
-
High 8.4
Access of Memory Location Before Start of Buffer in vim/vim
Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.
-
High 8.4
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
-
High 8.4
Use of Out-of-range Pointer Offset in vim/vim
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.
-
High 8.4CVE-2022-0572 EPSS 26%
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
-
High 8.4
Stack-based Buffer Overflow in vim/vim
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
-
High 8.4
Use of Out-of-range Pointer Offset in vim/vim
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418.
-
High 8.4CVE-2022-0714 EPSS 13%
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436.
-
High 8.4
Heap-based Buffer Overflow occurs in vim in vim/vim
Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.
-
High 7.8
Use of Out-of-range Pointer Offset in vim/vim
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.
-
High 7.8
global heap buffer overflow in skip_range in vim/vim
global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
-
High 7.8
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Buffer Over-read in vim/vim
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Buffer Over-read in vim/vim
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura 13. An app may be a…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, wat…
-
High 7.8CVE-2022-32898 Public exploit
The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS V…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS V…
-
High 7.8
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 16, iOS 16, watchOS 9…
-
High 7.8
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13. Processing a ma…
-
High 7.8
This issue was addressed with improved checks. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to…
-
High 7.8
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6, iOS…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS …
-
High 7.8
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.7, macOS …
-
High 7.8
A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able …
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Big Sur 11.7, macOS Vent…
-
High 7.8
The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ve…
-
High 7.8CVE-2022-32947 Public exploit
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13,…
-
High 7.8
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.7 and iPadOS 15.7, macOS Ventur…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. Processing a maliciousl…
-
High 7.8
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16.1 and iPadOS 16, …
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to e…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to e…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to e…
-
High 7.4
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 8.2.
-
High 7.3
Use after free in append_command in vim/vim
Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
-
High 7.3
Heap buffer overflow in vim_strncpy find_word in vim/vim
Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
-
High 7.1
ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read…
-
High 7.0
A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be abl…
-
High 7.0
A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. …
-
Medium 6.8
Use of Out-of-range Pointer Offset in vim/vim
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.
-
Medium 6.7
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 16.1 and iPadOS 16, ma…
-
Medium 6.7
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13.…
-
Medium 6.6
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in vim/vim prior to 8.2.
-
Medium 6.6
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in vim/vim
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash)…
-
Medium 6.6
Buffer Over-read in function find_next_quote in vim/vim
Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution
-
Medium 6.6
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash)…
-
Medium 6.6
Buffer Over-read in function grab_file_name in vim/vim
Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.
-
Medium 6.6
NULL Pointer Dereference in vim/vim
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959.
-
Medium 6.6
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.
-
Medium 6.6
Classic Buffer Overflow in vim/vim
Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.
-
Medium 6.6
Buffer Over-read in vim/vim
Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.
-
Medium 6.5CVE-2022-32206 EPSS 36%
curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple …
-
Medium 6.4
A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. …
-
Medium 6.4
A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. …
-
Medium 6.2
NULL Pointer Dereference in vim/vim
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428.
-
Medium 6.1
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
-
Medium 6.1
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim prior to 8.2.
-
Medium 6.1
Heap-based Buffer Overflow in function cmdline_erase_chars in vim/vim
Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution
-
Medium 6.1
The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Saf…
-
Medium 5.9
When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw make…
-
Medium 5.9
This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. A user in a privileged…
-
Medium 5.5
Out-of-bounds Read in vim/vim
Out-of-bounds Read in vim/vim prior to 8.2.
-
Medium 5.5
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
-
Medium 5.5
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a de…
-
Medium 5.5
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able…
-
Medium 5.5
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13…
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. An a…
-
Medium 5.5CVE-2022-32862 Public exploit
This issue was addressed with improved data protection. This issue is fixed in macOS Big Sur 11.7.1, macOS Ventura 13, …
-
Medium 5.5
A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Mont…
-
Medium 5.5
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iO…
-
Medium 5.5CVE-2022-32883 Public exploit
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS…
-
Medium 5.5
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, macOS Monterey 12.…
-
Medium 5.5
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ve…
-
Medium 5.5
The issue was addressed with improved handling of caches. This issue is fixed in iOS 16. An app may be able to access u…
-
Medium 5.5
This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. An app may be …
-
Medium 5.5
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may…
-
Medium 5.5
A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS…
-
Medium 5.5
An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, ma…
-
Medium 5.5
An access issue was addressed with additional sandbox restrictions. This issue is fixed in tvOS 16.1, iOS 16.1 and iPad…
-
Medium 5.5
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to access…
-
Medium 5.5
This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to …
-
Medium 5.5
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventu…
-
Medium 5.5
A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS…
-
Medium 5.5
This issue was addressed by removing additional entitlements. This issue is fixed in tvOS 16.1, macOS Ventura 13, watch…
-
Medium 5.5
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to modify…
-
Medium 5.5
The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13. An app may be able t…
-
Medium 5.5
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13. An app may be…
-
Medium 5.3
A logic issue was addressed with improved state management. This issue is fixed in iOS 16. Deleted contacts may still a…
-
Medium 5.3
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A u…
-
Medium 5.3
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in …
-
Medium 5.0
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13…
-
Medium 4.7
An access issue was addressed with improvements to the sandbox. This issue is fixed in Safari 16, iOS 15.7 and iPadOS 1…
-
Medium 4.7
A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be abl…
-
Medium 4.3CVE-2022-32205 EPSS 31%
A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 st…
-
Low 3.3
This issue was addressed with improved entitlements. This issue is fixed in iOS 16, watchOS 9. An app may be able to re…
-
Low 3.3
The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS B…
-
Low 3.3
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.6.3, macOS Ve…
-
Low 2.4
This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. A user with ph…
-
Low 2.4
A logic issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9.…
-
Low 2.4
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16, iOS 15.7 a…
-
Unscored —
A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo funct…
-
Unscored —
An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.
-
Unscored —
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
-
Unscored —
There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occ…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS …
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13. A shortcut may be able…
-
Unscored —
An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, ma…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to e…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may…
-
Unscored —
An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A c…
-
Unscored —
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Monterey 12…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13. An app m…
-
Unscored —
A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A re…
-
Unscored —
This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to …
Revision history
-
#7
Neue Updates von Oracle Linux aufgenommen
-
#6
CVE-2022-46723 ergänzt
-
#5
CVE's ergänzt
-
#4
CVE Nummern ergänzt
-
#3
CVE's ergänzt
-
#2
CVEs ergänzt
-
#1
Initiale Fassung
References
-
Apple Security Advisory HT213488 vom 2022-10-24
https://support.apple.com/en-us/HT213488
-
Apple Security Advisory HT213493 vom 2022-10-24
https://support.apple.com/en-us/HT213493
-
Apple Security Advisory HT213494 vom 2022-10-24
https://support.apple.com/en-us/HT213494
-
Oracle Linux Security Advisory ELSA-2026-73519 vom 2026-10-09
http://linux.oracle.com/errata/ELSA-2026-73519.html