CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2022-32941
https://notcve.org/view.php?id=CVE-2022-32941
A buffer overflow may result in arbitrary code execution. • https://support.apple.com/en-us/HT213488 https://support.apple.com/en-us/HT213489 https://support.apple.com/en-us/HT213490 https://support.apple.com/en-us/HT213493 https://support.apple.com/en-us/HT213494 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2022-42800
https://notcve.org/view.php?id=CVE-2022-42800
A user may be able to cause unexpected app termination or arbitrary code execution. • https://support.apple.com/en-us/HT213488 https://support.apple.com/en-us/HT213489 https://support.apple.com/en-us/HT213490 https://support.apple.com/en-us/HT213491 https://support.apple.com/en-us/HT213493 https://support.apple.com/en-us/HT213494 •
CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 0CVE-2022-32922 – Apple Safari PDFPluginAnnotation Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-32922
Processing maliciously crafted web content may lead to arbitrary code execution. • https://support.apple.com/en-us/HT213488 https://support.apple.com/en-us/HT213489 https://support.apple.com/en-us/HT213495 • CWE-416: Use After Free •
CVSS: 8.8EPSS: 0%CPEs: 11EXPL: 0CVE-2022-42823 – webkitgtk: type confusion issue leading to arbitrary code execution
https://notcve.org/view.php?id=CVE-2022-42823
Processing maliciously crafted web content may lead to arbitrary code execution. • http://www.openwall.com/lists/oss-security/2022/11/04/4 https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ https://security.gentoo.org/glsa/202 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2022-42813
https://notcve.org/view.php?id=CVE-2022-42813
Processing a maliciously crafted certificate may lead to arbitrary code execution. • https://support.apple.com/en-us/HT213488 https://support.apple.com/en-us/HT213489 https://support.apple.com/en-us/HT213491 https://support.apple.com/en-us/HT213492 • CWE-295: Improper Certificate Validation •