Apple
Page 51 of 100 — Apple CVEs from a corpus of 15028, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-38166 | High | 7.5 | 2022-11-25 | In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-22_07, the aerdl.dll unpacker handler crashes. This can le… |
CVE-2022-40304 | High | 7.8 | 2022-11-23 | An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic… |
CVE-2022-40303 | High | 7.5 | 2022-11-23 | An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer cou… |
CVE-2022-41950 | Medium | 6.4 | 2022-11-22 | super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. This caused inaccurat… |
CVE-2022-3970 | Medium | 6.3 | 2022-11-13 | A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The… |
CVE-2022-42832 | Medium | 6.4 | 2022-11-01 | A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able… |
CVE-2022-42831 | Medium | 6.4 | 2022-11-01 | A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able… |
CVE-2022-42830 | Medium | 6.7 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able… |
CVE-2022-42829 | Medium | 6.7 | 2022-11-01 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privile… |
CVE-2022-42827 | High | 7.8 | 2022-11-01 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An appli… |
CVE-2022-42825 | Medium | 5.5 | 2022-11-01 | This issue was addressed by removing additional entitlements. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Mo… |
CVE-2022-42824 | Medium | 5.5 | 2022-11-01 | A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 1… |
CVE-2022-42823 | High | 8.8 | 2022-11-01 | A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and… |
CVE-2022-42820 | High | 7.8 | 2022-11-01 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app may cause unexp… |
CVE-2022-42819 | Medium | 5.5 | 2022-11-01 | An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may b… |
CVE-2022-42818 | Medium | 5.9 | 2022-11-01 | This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. A user in a privileged network position may be able to track u… |
CVE-2022-42817 | Medium | 6.5 | 2022-11-01 | A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, watchOS 9.1. Visiting… |
CVE-2022-42815 | Medium | 5.5 | 2022-11-01 | This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data. |
CVE-2022-42814 | Medium | 5.5 | 2022-11-01 | A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data. |
CVE-2022-42813 | Critical | 9.8 | 2022-11-01 | A certificate validation issue existed in the handling of WKWebView. This issue was addressed with improved validation. This issue is fixed in tvOS 16.1, iOS 1… |
CVE-2022-42811 | Medium | 5.5 | 2022-11-01 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An… |
CVE-2022-42810 | Medium | 5.5 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13… |
CVE-2022-42809 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted gcx file may lead to unexpecte… |
CVE-2022-42808 | Critical | 9.8 | 2022-11-01 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9… |
CVE-2022-42806 | High | 7.0 | 2022-11-01 | A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app may be able to execute arbitrary… |
CVE-2022-42803 | High | 7.0 | 2022-11-01 | A race condition was addressed with improved locking. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 a… |
CVE-2022-42801 | High | 7.8 | 2022-11-01 | A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and i… |
CVE-2022-42800 | High | 7.8 | 2022-11-01 | This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macO… |
CVE-2022-42799 | Medium | 6.1 | 2022-11-01 | The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiti… |
CVE-2022-42798 | Medium | 5.5 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1… |
CVE-2022-42796 | High | 7.8 | 2022-11-01 | This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.7 and iPadOS 15.7, macOS Ventura 13. An app may be able to gain elevate… |
CVE-2022-42795 | High | 8.8 | 2022-11-01 | A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS Ventura 13, watchOS 9. Processing a malic… |
CVE-2022-42793 | Medium | 5.5 | 2022-11-01 | An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPa… |
CVE-2022-42791 | High | 7.0 | 2022-11-01 | A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel… |
CVE-2022-42790 | Medium | 5.5 | 2022-11-01 | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macO… |
CVE-2022-42789 | Medium | 5.5 | 2022-11-01 | An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An… |
CVE-2022-42788 | Medium | 5.5 | 2022-11-01 | A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Ventura 13. A malicious application may… |
CVE-2022-32947 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to exec… |
CVE-2022-32946 | Medium | 5.5 | 2022-11-01 | This issue was addressed with improved entitlements. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to record audio using a pair of connecte… |
CVE-2022-32944 | High | 7.8 | 2022-11-01 | A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watch… |
CVE-2022-32941 | Critical | 9.8 | 2022-11-01 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, iOS 16.1 and iPadOS 16, macOS Monte… |
CVE-2022-32940 | High | 7.8 | 2022-11-01 | The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be abl… |
CVE-2022-32939 | High | 7.8 | 2022-11-01 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An app may be able to execute… |
CVE-2022-32938 | Medium | 5.3 | 2022-11-01 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13… |
CVE-2022-32936 | Medium | 5.5 | 2022-11-01 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to disclose kernel memory. |
CVE-2022-32935 | Medium | 4.6 | 2022-11-01 | A lock screen issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, macOS Ventura 13… |
CVE-2022-32934 | High | 8.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. A remote user may be a… |
CVE-2022-32932 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, watchOS 9.1. An app may be… |
CVE-2022-32929 | Medium | 5.5 | 2022-11-01 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 15.7 and iPadOS 15.7, iOS 16.1 and iPa… |
CVE-2022-32928 | Medium | 5.3 | 2022-11-01 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A user in a privileged network position may… |
CVE-2022-32927 | High | 7.5 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. Joining a malicious Wi-Fi n… |
CVE-2022-32926 | Medium | 6.7 | 2022-11-01 | The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 an… |
CVE-2022-32925 | High | 7.1 | 2022-11-01 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to cause unexpe… |
CVE-2022-32924 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Big Sur 11.7, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS… |
CVE-2022-32923 | Medium | 6.5 | 2022-11-01 | A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9… |
CVE-2022-32922 | High | 8.8 | 2022-11-01 | A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13. Processing… |
CVE-2022-32918 | Medium | 5.5 | 2022-11-01 | This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to bypass Privacy preferences. |
CVE-2022-32915 | High | 7.8 | 2022-11-01 | A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel pr… |
CVE-2022-32914 | High | 7.8 | 2022-11-01 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Mon… |
CVE-2022-32913 | Low | 3.3 | 2022-11-01 | The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, w… |
CVE-2022-32910 | High | 7.5 | 2022-11-01 | A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5, Security Update 2022-005 Catalina. An archi… |
CVE-2022-32909 | Medium | 5.5 | 2022-11-01 | The issue was addressed with improved handling of caches. This issue is fixed in iOS 16. An app may be able to access user-sensitive data. |
CVE-2022-32907 | High | 7.8 | 2022-11-01 | This issue was addressed with improved checks. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel priv… |
CVE-2022-32905 | High | 7.8 | 2022-11-01 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted DMG file may lead to a… |
CVE-2022-32904 | Medium | 5.5 | 2022-11-01 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app ma… |
CVE-2022-32903 | High | 7.8 | 2022-11-01 | A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrar… |
CVE-2022-32899 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13, watchOS 9. An app may be able… |
CVE-2022-32898 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13, watchOS 9. An app may be able… |
CVE-2022-32895 | Medium | 4.7 | 2022-11-01 | A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file… |
CVE-2022-32892 | High | 8.6 | 2022-11-01 | An access issue was addressed with improvements to the sandbox. This issue is fixed in Safari 16, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13. A sandbox… |
CVE-2022-32890 | High | 8.6 | 2022-11-01 | A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. A sandboxed process may be able to circumvent sandbox restrictions. |
CVE-2022-32889 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel privi… |
CVE-2022-32888 | High | 8.8 | 2022-11-01 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPa… |
CVE-2022-32887 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16. An app may be able to execute arbitrary code with kernel privileges. |
CVE-2022-32881 | Medium | 5.5 | 2022-11-01 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tv… |
CVE-2022-32879 | Low | 2.4 | 2022-11-01 | A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, watchOS 9, tvOS 16. A us… |
CVE-2022-32877 | Medium | 5.5 | 2022-11-01 | A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Monterey 12.6. An app may be able to access… |
CVE-2022-32875 | Medium | 5.0 | 2022-11-01 | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6… |
CVE-2022-32870 | Low | 2.4 | 2022-11-01 | A logic issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A user with physical access to a device… |
CVE-2022-32867 | Low | 2.4 | 2022-11-01 | This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. A user with physical access to an iOS device may be ab… |
CVE-2022-32866 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, watchOS 9, macOS Monterey 12.6, tvOS 16. An… |
CVE-2022-32865 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to execute arbitrary code with kerne… |
CVE-2022-32862 | Medium | 5.5 | 2022-11-01 | This issue was addressed with improved data protection. This issue is fixed in macOS Big Sur 11.7.1, macOS Ventura 13, macOS Monterey 12.6.1. An app with root… |
CVE-2022-32859 | Medium | 5.3 | 2022-11-01 | A logic issue was addressed with improved state management. This issue is fixed in iOS 16. Deleted contacts may still appear in spotlight search results. |
CVE-2022-32858 | Medium | 5.5 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. An app may be able to leak sensitive kernel… |
CVE-2022-32835 | Low | 3.3 | 2022-11-01 | This issue was addressed with improved entitlements. This issue is fixed in iOS 16, watchOS 9. An app may be able to read a persistent device identifier. |
CVE-2022-32827 | Medium | 5.5 | 2022-11-01 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to cause a denial-o… |
CVE-2022-32794 | High | 7.8 | 2022-11-01 | A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6… |
CVE-2022-26762 | High | 7.8 | 2022-11-01 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious applic… |
CVE-2022-26730 | High | 8.8 | 2022-11-01 | A memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input validation. This issue is fixed in macOS Vent… |
CVE-2022-26719 | High | 8.8 | 2022-11-01 | A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey… |
CVE-2022-26717 | High | 8.8 | 2022-11-01 | A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 1… |
CVE-2022-26716 | High | 8.8 | 2022-11-01 | A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey… |
CVE-2022-26710 | High | 8.8 | 2022-11-01 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS… |
CVE-2022-26709 | High | 8.8 | 2022-11-01 | A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 1… |
CVE-2022-22677 | Medium | 4.3 | 2022-11-01 | A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 1… |
CVE-2022-22658 | Medium | 6.5 | 2022-11-01 | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 16.0.3. Processing a maliciously crafted email message may l… |
CVE-2022-42915 | High | 8.1 | 2022-10-29 | curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection to the remote serve… |
CVE-2022-42916 | High | 7.5 | 2022-10-29 | In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directl… |
CVE-2022-38436 | High | 7.8 | 2022-10-25 | Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which c… |