CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-32933 – webkitgtk: A website may able to track visited websites in private browsing
https://notcve.org/view.php?id=CVE-2022-32933
An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.5. A website may be able to track the websites a user visited in Safari private browsing mode. Se solucionó un problema de divulgación de información eliminando el código vulnerable. Este problema se solucionó en macOS Monterey 12.5. • https://support.apple.com/en-us/HT213345 https://access.redhat.com/security/cve/CVE-2022-32933 https://bugzilla.redhat.com/show_bug.cgi?id=2271441 • CWE-841: Improper Enforcement of Behavioral Workflow •
CVSS: 8.6EPSS: 0%CPEs: 1EXPL: 0CVE-2022-48683
https://notcve.org/view.php?id=CVE-2022-48683
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13. An app may be able to break out of its sandbox. Se solucionó un problema de acceso con restricciones adicionales de la zona de pruebas. Este problema se solucionó en macOS Ventura 13. • https://support.apple.com/en-us/HT213488 • CWE-284: Improper Access Control •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2023-40389
https://notcve.org/view.php?id=CVE-2023-40389
The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be able to access sensitive user data. El problema se solucionó mejorando la restricción del acceso a los contenedores de datos. Este problema se solucionó en macOS Ventura 13.6.5, macOS Monterey 12.7.4. • https://support.apple.com/en-us/HT214083 https://support.apple.com/en-us/HT214085 https://support.apple.com/kb/HT214035 https://support.apple.com/kb/HT214036 https://support.apple.com/kb/HT214040 https://support.apple.com/kb/HT214041 •
CVSS: 8.1EPSS: 0%CPEs: 1EXPL: 0CVE-2022-32897
https://notcve.org/view.php?id=CVE-2022-32897
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciously crafted tiff file may lead to arbitrary code execution. Se solucionó un problema de corrupción de memoria con una validación mejorada. Este problema se solucionó en macOS Monterey 12.5. • https://support.apple.com/en-us/HT213345 • CWE-94: Improper Control of Generation of Code ('Code Injection') CWE-787: Out-of-bounds Write •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-27792
https://notcve.org/view.php?id=CVE-2024-27792
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data. Este problema se solucionó agregando una solicitud adicional de consentimiento del usuario. Este problema se solucionó en macOS Sonoma 14.4. • https://support.apple.com/en-us/HT214084 •