CVSS: 5.5EPSS: 0%CPEs: 15EXPL: 0CVE-2022-26727 – Apple Security Advisory 2022-05-16-4
https://notcve.org/view.php?id=CVE-2022-26727
17 May 2022 — This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. A malicious application may be able to modify protected parts of the file system. Este problema se abordó con derechos mejorados. Este problema es corregido en Security Update 2022-004 Catalina, macOS Monterey versión 12.4. • https://support.apple.com/en-us/HT213255 •
CVSS: 5.5EPSS: 0%CPEs: 16EXPL: 0CVE-2022-26746 – Apple Security Advisory 2022-05-16-4
https://notcve.org/view.php?id=CVE-2022-26746
17 May 2022 — This issue was addressed by removing the vulnerable code. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences. Este problema es corregido al eliminar el código vulnerable. Este problema es corregido en Security Update 2022-004 Catalina, macOS Monterey versión 12.4, macOS Big Sur versión 11.6.6. • https://support.apple.com/en-us/HT213255 •
CVSS: 5.5EPSS: 0%CPEs: 20EXPL: 0CVE-2022-22663 – Apple Security Advisory 2022-05-16-4
https://notcve.org/view.php?id=CVE-2022-22663
17 May 2022 — This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-004 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.6. A malicious application may bypass Gatekeeper checks. Este problema ha sido abordado con comprobaciones mejoradas para evitar acciones no autorizadas. Este problema es corregido en iOS versión 15.4 y iPadOS versión 15.4, Security Update 2022-004 Catalina, macOS Monterey versión 12.3, macOS Big Sur versión... • https://support.apple.com/en-us/HT213182 •
CVSS: 9.3EPSS: 0%CPEs: 19EXPL: 0CVE-2022-26714 – Apple Security Advisory 2022-05-16-4
https://notcve.org/view.php?id=CVE-2022-26714
17 May 2022 — A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges. Se abordó un problema de corrupción de memoria con una comprobación mejorada. Este problema es corregido en tvOS versión 15.5, iOS versión 15.5 y iPadOS versión 15.5, Security Update 2022-004 Catalina, watchOS versión ... • https://support.apple.com/en-us/HT213253 • CWE-787: Out-of-bounds Write •
CVSS: 9.3EPSS: 0%CPEs: 16EXPL: 0CVE-2022-26715 – Apple Security Advisory 2022-05-16-4
https://notcve.org/view.php?id=CVE-2022-26715
17 May 2022 — An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An application may be able to gain elevated privileges. Se abordó un problema de escritura fuera de límites con una comprobación de límites mejorada. Este problema es corregido en Security Update 2022-004 Catalina, macOS Monterey versión 12.4, macOS Big Sur versión 11.6.6. • https://support.apple.com/en-us/HT213255 • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 20EXPL: 0CVE-2022-26704 – Apple Security Advisory 2022-05-16-2
https://notcve.org/view.php?id=CVE-2022-26704
17 May 2022 — A validation issue existed in the handling of symlinks and was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.4. An app may be able to gain elevated privileges. Se presentaba un problema de comprobación en el manejo de los enlaces simbólicos y se abordó con una comprobación de los enlaces simbólicos mejorada. Este problema es corregido en macOS Monterey versión 12.4. • http://seclists.org/fulldisclosure/2022/Jul/13 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 9.3EPSS: 6%CPEs: 20EXPL: 2CVE-2022-26757 – Apple Security Advisory 2022-05-16-4
https://notcve.org/view.php?id=CVE-2022-26757
17 May 2022 — A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges. Se abordó un problema de uso de memoria previamente liberada con una administración de memoria mejorada. Este problema es corregido en tvOS versión 15.5, iOS versión 15.5 y iPadOS versión 15.5, Security Update 2022... • https://packetstorm.news/files/id/167517 • CWE-416: Use After Free •
CVSS: 9.8EPSS: 1%CPEs: 17EXPL: 0CVE-2022-26775 – Apple Security Advisory 2022-05-16-4
https://notcve.org/view.php?id=CVE-2022-26775
17 May 2022 — An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An attacker may be able to cause unexpected application termination or arbitrary code execution. Se abordó un desbordamiento de enteros con una comprobación de entradas mejorada. Este problema es corregido en Security Update 2022-004 Catalina, macOS Monterey versión 12.4. • https://support.apple.com/en-us/HT213255 • CWE-190: Integer Overflow or Wraparound •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 1CVE-2020-13495
https://notcve.org/view.php?id=CVE-2020-13495
18 Apr 2022 — An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an arbitrary out-of-bounds memory access that could lead to the disclosure of sensitive information. This vulnerability could be used to bypass mitigations and aid additional exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided file. Se presenta una vulnerabilidad explotable en la forma en que Pixar OpenUSD versión... • https://talosintelligence.com/vulnerability_reports/TALOS-2020-1104 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 0%CPEs: 18EXPL: 0CVE-2022-22674 – Apple macOS Out-of-Bounds Read Vulnerability
https://notcve.org/view.php?id=CVE-2022-22674
01 Apr 2022 — An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory. Se presentaba un problema de lectura fuera de límites que conllevaba a una divulgación de la memoria del kernel. • https://support.apple.com/en-us/HT213220 • CWE-125: Out-of-bounds Read •