DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Apple macOS: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2022-05-16
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen und im schlimmsten Fall das System zu kompromittieren.
01
beschreibt (89)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-32794US | high7.8 | — | ||
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able… | ||||
| CVE-2022-26762US | high7.8 | — | ||
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious application may be able to… | ||||
| CVE-2022-26719US | high8.8 | — | ||
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. P… | ||||
| CVE-2022-26717US | high8.8 | Exploit | ||
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTu… | ||||
| CVE-2022-26716US | high8.8 | — | ||
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. P… | ||||
| CVE-2022-26710US | high8.8 | — | ||
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing malic… | ||||
| CVE-2022-26709US | high8.8 | — | ||
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Pro… | ||||
| CVE-2022-22677US | medium4.3 | — | ||
A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-previ… | ||||
| CVE-2022-32790US | high7.5 | — | ||
This issue was addressed with improved checks. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, macOS Big Sur 11.6.6, Security Update 2… | ||||
| CVE-2022-26700US | high8.8 | — | ||
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. P… | ||||
| CVE-2022-32882US | critical9.8 | — | ||
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to bypass Privacy preferences. | ||||
| CVE-2022-26696US | high8.8 | — | ||
This issue was addressed with improved environment sanitization. This issue is fixed in macOS Monterey 12.4. A sandboxed process may be able to circumvent sandbox restrictions. | ||||
| CVE-2022-26776US | critical9.8 | — | ||
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to cause unexpected application termination… | ||||
| CVE-2022-26775US | critical9.8 | — | ||
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An attacker may be able to cause un… | ||||
| CVE-2022-26772US | high7.8 | — | ||
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel… | ||||
| CVE-2022-26770US | high7.8 | — | ||
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A mal… | ||||
| CVE-2022-26769US | high7.8 | — | ||
A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malic… | ||||
| CVE-2022-26768US | high7.8 | — | ||
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, watchOS 8.6, tvOS 15.5, macOS Big Sur 11.6.6. An application may… | ||||
| CVE-2022-26767US | medium5.5OT erhöht | — | ||
The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy… | ||||
| CVE-2022-26766US | medium5.5 | Exploit | ||
A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Bi… | ||||
20 von 89 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- PoC CVE-2022-26726external
- Debian Security Advisory DLA-3118 vom 2022-09-22external
- Apple Security Advisory vom 2022-05-16external
- Apple Security Advisory vom 2022-05-16external
- Apple Security Advisory vom 2022-05-16external
- WID-SEC-W-2022-1057 - CSAF Versionself
- WID-SEC-2022-1057 - Portal Versionself
- Wojciech Regula blogpost vom 2022-11-21external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan