DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Apple macOS: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2022-12-13
Ein entfernter Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um den Benutzer zu täuschen, Informationen offenzulegen, Sicherheitsmechanismen zu umgehen, Rechte zu erweitern und beliebigen Code mit Kernel-Rechten auszuführen.
01
beschreibt (46)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-48618US | high7.0OT kritisch | KEV | ||
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write… | ||||
| CVE-2022-46720US | high8.6 | — | ||
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. An app may be able to break out of its sandbo… | ||||
| CVE-2022-46716US | high7.5 | — | ||
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2. Private Relay functionality did not match system se… | ||||
| CVE-2022-46703US | medium5.5 | — | ||
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2. An app may be able to rea… | ||||
| CVE-2022-42858US | high7.8 | — | ||
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.1. An app may be able to execute arbitrary code with kernel privileg… | ||||
| CVE-2022-46705US | medium4.3 | — | ||
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safa… | ||||
| CVE-2022-46704US | medium5.5OT erhöht | — | ||
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to modify pro… | ||||
| CVE-2022-46701US | high7.8 | — | ||
The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2. Connecting to a malicious NFS server may lead t… | ||||
| CVE-2022-46700US | high8.8 | — | ||
A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 an… | ||||
| CVE-2022-46699US | high8.8 | — | ||
A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Pr… | ||||
| CVE-2022-46698US | medium6.5 | — | ||
A logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2.… | ||||
| CVE-2022-46697US | high7.8 | — | ||
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.1. An app may be able to execute arbitrary code with kernel privi… | ||||
| CVE-2022-46696US | high8.8 | — | ||
A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Pr… | ||||
| CVE-2022-46695US | medium6.5 | — | ||
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPad… | ||||
| CVE-2022-46693US | high7.8 | — | ||
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2,… | ||||
| CVE-2022-46692US | medium5.5OT erhöht | — | ||
A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1… | ||||
| CVE-2022-46691US | high8.8 | — | ||
A memory consumption issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 an… | ||||
| CVE-2022-46690US | high7.8 | — | ||
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may b… | ||||
| CVE-2022-46689US | high7.0 | Exploit | ||
A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS… | ||||
| CVE-2022-42867US | high8.8 | — | ||
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Proc… | ||||
20 von 46 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Apple Security Advisory HT213532 vom 2022-12-13external
- Apple Security Advisory HT213533 vom 2022-12-13external
- Apple Security Advisory HT213534 vom 2022-12-13external
- WID-SEC-W-2022-2313 - CSAF Versionself
- WID-SEC-2022-2313 - Portal Versionself
- CISA Known Exploited Vulnerabilities Catalog vom 2024-01-31external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan