DeutschShown in its original language — a full translation is planned for a future version.
Apple macOS: Mehrere Schwachstellen
view advisory published 2022-05-16
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen und im schlimmsten Fall das System zu kompromittieren.
01
describes (89)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-32794US | high7.8 | — | ||
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able… | ||||
| CVE-2022-26762US | high7.8 | — | ||
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious application may be able to… | ||||
| CVE-2022-26719US | high8.8 | — | ||
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. P… | ||||
| CVE-2022-26717US | high8.8 | Exploit | ||
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTu… | ||||
| CVE-2022-26716US | high8.8 | — | ||
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. P… | ||||
| CVE-2022-26710US | high8.8 | — | ||
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing malic… | ||||
| CVE-2022-26709US | high8.8 | — | ||
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Pro… | ||||
| CVE-2022-22677US | medium4.3 | — | ||
A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-previ… | ||||
| CVE-2022-32790US | high7.5 | — | ||
This issue was addressed with improved checks. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, macOS Big Sur 11.6.6, Security Update 2… | ||||
| CVE-2022-26700US | high8.8 | — | ||
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. P… | ||||
| CVE-2022-32882US | critical9.8 | — | ||
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to bypass Privacy preferences. | ||||
| CVE-2022-26696US | high8.8 | — | ||
This issue was addressed with improved environment sanitization. This issue is fixed in macOS Monterey 12.4. A sandboxed process may be able to circumvent sandbox restrictions. | ||||
| CVE-2022-26776US | critical9.8 | — | ||
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to cause unexpected application termination… | ||||
| CVE-2022-26775US | critical9.8 | — | ||
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An attacker may be able to cause un… | ||||
| CVE-2022-26772US | high7.8 | — | ||
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel… | ||||
| CVE-2022-26770US | high7.8 | — | ||
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A mal… | ||||
| CVE-2022-26769US | high7.8 | — | ||
A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malic… | ||||
| CVE-2022-26768US | high7.8 | — | ||
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, watchOS 8.6, tvOS 15.5, macOS Big Sur 11.6.6. An application may… | ||||
| CVE-2022-26767US | medium5.5OT elevated | — | ||
The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy… | ||||
| CVE-2022-26766US | medium5.5 | Exploit | ||
A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Bi… | ||||
showing 20 of 89
02
references
External citations — patches, advisories, analysis.
- PoC CVE-2022-26726external
- Debian Security Advisory DLA-3118 vom 2022-09-22external
- Apple Security Advisory vom 2022-05-16external
- Apple Security Advisory vom 2022-05-16external
- Apple Security Advisory vom 2022-05-16external
- WID-SEC-W-2022-1057 - CSAF Versionself
- WID-SEC-2022-1057 - Portal Versionself
- Wojciech Regula blogpost vom 2022-11-21external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan