High 1 exploited CVE WID-SEC-2023-1213 15 CVEs

Apple macOS (Monterey): Mehrere Schwachstellen

Published Jan 26, 2022 · Updated May 14, 2023 · Revision 3 · de-DE

Vendor: Apple Product: macOS Monterey < 12.2 Platform: macOS

Summary

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Apple macOS (Monterey) ausnutzen, um beliebigen Programmcode mit Kernel-Privilegien auszuführen, seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen.

Product

Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.

Vulnerabilities 15

Critical 9.8

CVE-2022-22587 Exploited EPSS 12%

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3…

Apple macOS iOS and iPadOS macOS iOS

Mar 18, 2022
KEV Jan 28, 2022
Unscored —

CVE-2022-22578

A logic issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watch…

Apple macOS iOS and iPadOS watchOS macOS iOS

Mar 18, 2022
Unscored —

CVE-2022-22579

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadO…

Apple macOS iOS and iPadOS tvOS macOS iOS

Mar 18, 2022
Unscored —

CVE-2022-22583

A permissions issue was addressed with improved validation. This issue is fixed in Security Update 2022-001 Catalina, m…

Apple macOS macOS

Mar 18, 2022
Unscored —

CVE-2022-22584

A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS…

Apple macOS iOS and iPadOS watchOS macOS iOS

Mar 18, 2022
Unscored —

CVE-2022-22585

An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitizatio…

Apple macOS iOS and iPadOS watchOS macOS iOS

Mar 18, 2022
Unscored —

CVE-2022-22586

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.2. A…

Apple macOS macOS

Mar 18, 2022
Unscored —

CVE-2022-22589

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, wat…

Apple macOS iOS and iPadOS watchOS macOS iOS Debian Ubuntu Alpine

Mar 18, 2022
Unscored —

CVE-2022-22590

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, …

Apple macOS iOS and iPadOS watchOS macOS iOS Debian Ubuntu Alpine

Mar 18, 2022
Unscored —

CVE-2022-22591

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.2. A ma…

Apple macOS macOS

Mar 18, 2022
Unscored —

CVE-2022-22592

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.…

Apple macOS iOS and iPadOS watchOS macOS iOS Debian Ubuntu Alpine

Mar 18, 2022
Unscored —

CVE-2022-22593

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.3 and iPadOS 15.3, w…

Apple macOS iOS and iPadOS watchOS macOS iOS

Mar 18, 2022
Unscored —

CVE-2022-22594

A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 a…

Apple macOS iOS and iPadOS watchOS macOS iOS Debian Ubuntu Alpine

Mar 18, 2022
Unscored —

CVE-2022-22646

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.2. A malicious appli…

Apple macOS macOS

Aug 14, 2023
Unscored —

CVE-2022-22676

An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in…

Apple macOS macOS

May 26, 2022

Revision history

2023-05-14 #3
CVE-2022-22646, CVE-2022-22676 ergänzt
2022-01-27 #2
Referenz(en) aufgenommen: APPLE-SA-2022-01-26-2
2022-01-26 #1
Initiale Fassung

References

Apple Security Advisory vom 2022-01-26
https://support.apple.com/en-us/HT213054