Page 37 of 852 results (0.019 seconds)

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2023-23507 – Apple Security Advisory 2023-01-23-4

https://notcve.org/view.php?id=CVE-2023-23507

24 Jan 2023 — The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2. An app may be able to execute arbitrary code with kernel privileges. macOS Ventura 13.2 addresses buffer overflow, bypass, code execution, information leakage, and use-after-free vulnerabilities. • https://support.apple.com/en-us/HT213604 •

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0

CVE-2023-23519 – Apple macOS KTX Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2023-23519

24 Jan 2023 — A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Processing an image may lead to a denial-of-service. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within t... • https://support.apple.com/en-us/HT213599 • CWE-787: Out-of-bounds Write •

CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 18

CVE-2023-22809 – sudo 1.8.0 to 1.9.12p1 - Privilege Escalation

https://notcve.org/view.php?id=CVE-2023-22809

18 Jan 2023 — In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value. En S... • https://packetstorm.news/files/id/172509 • CWE-269: Improper Privilege Management •

CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0

CVE-2022-32860

https://notcve.org/view.php?id=CVE-2022-32860

15 Dec 2022 — An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, macOS Big Sur 11.6.8. An app may be able to execute arbitrary code with kernel privileges. Se solucionó una escritura fuera de los límites con una validación de entrada mejorada. Este problema se solucionó en iOS 15.6 y iPadOS 15.6, macOS Monterey 12.5, macOS Big Sur 11.6.8. • https://support.apple.com/en-us/HT213344 • CWE-787: Out-of-bounds Write •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2022-42847 – Apple Security Advisory 2022-12-13-4

https://notcve.org/view.php?id=CVE-2022-42847

15 Dec 2022 — An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.1. An app may be able to execute arbitrary code with kernel privileges. Se solucionó un problema de escritura fuera de los límites con una validación de entrada mejorada. Este problema se solucionó en macOS Ventura 13.1. • http://seclists.org/fulldisclosure/2022/Dec/23 • CWE-787: Out-of-bounds Write •

CVSS: 7.0EPSS: 0%CPEs: 9EXPL: 1

CVE-2022-42864 – Apple Security Advisory 2022-12-13-6

https://notcve.org/view.php?id=CVE-2022-42864

15 Dec 2022 — A race condition was addressed with improved state handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges. Se solucionó una condición de ejecución con un mejor manejo del estado. Este problema se solucionó en tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 y iPadOS 15.7.2, iOS 16.2... • https://github.com/Muirey03/CVE-2022-42864 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •

CVSS: 5.0EPSS: 0%CPEs: 3EXPL: 0

CVE-2022-32945

https://notcve.org/view.php?id=CVE-2022-32945

15 Dec 2022 — An access issue was addressed with additional sandbox restrictions on third-party apps. This issue is fixed in macOS Ventura 13. An app may be able to record audio with paired AirPods. Se solucionó un problema de acceso con restricciones adicionales de sandbox en aplicaciones de terceros. Este problema se solucionó en macOS Ventura 13. • https://support.apple.com/en-us/HT213488 •

CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2022-32948

https://notcve.org/view.php?id=CVE-2022-32948

15 Dec 2022 — An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges. Se solucionó una lectura fuera de los límites con una verificación de los límites mejorada. Este problema se solucionó en iOS 15.6 y iPadOS 15.6, macOS Monterey 12.5. • https://support.apple.com/en-us/HT213345 • CWE-125: Out-of-bounds Read •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2022-42853 – Apple Security Advisory 2022-12-13-4

https://notcve.org/view.php?id=CVE-2022-42853

15 Dec 2022 — An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13.1. An app may be able to modify protected parts of the file system. Se solucionó un problema de acceso mejorando las restricciones de acceso. Este problema se solucionó en macOS Ventura 13.1. • http://seclists.org/fulldisclosure/2022/Dec/23 •

CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 0

CVE-2022-46693 – Apple Security Advisory 2022-12-13-8

https://notcve.org/view.php?id=CVE-2022-46693

15 Dec 2022 — An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing a maliciously crafted file may lead to arbitrary code execution. Se solucionó un problema de escritura fuera de los límites con una validación de entrada mejorada. Este problema se solucionó en tvOS 16.2, iCloud para Windows 14.1, macOS Ventura 13.1, iOS 16.2 y iPadOS 16.2, watchOS 9.2. • http://seclists.org/fulldisclosure/2022/Dec/20 • CWE-787: Out-of-bounds Write •