Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 52
Source: Apple
First published (updated )
CVE-2022-26715

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.

1 / 66
First published (updated )
CVE-2022-26761

Apple macOS Big SurUse After Free, Input Validation, Buffer Overflow

Risk 82
Severity
7.8
Use After Free, Input Validation, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 17
Source: Apple
First published (updated )
CVE-2022-26763

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

1 / 30
First published (updated )
CVE-2022-26714

Apple macOS Big SurUse After Free, Input Validation, Buffer Overflow, Integer Overflow, Race Condition

Risk 82
Severity
7.8
Use After Free, Input Validation, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

1 / 31
First published (updated )
CVE-2022-26757

Apple macOS Big SurInput Validation, Use After Free, Race Condition, Integer Overflow, Buffer Overflow

Risk 45
Severity
7.5
Input Validation, Use After Free, Race Condition, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 37
Source: Apple
First published (updated )
CVE-2022-32790

Apple macOS Big SurBuffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free

Risk 70
Severity
7.8
Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A validation issue existed in the handling of symlinks and was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.4. An app may be able to gain elevated privileges.

1 / 51
Source: MITRE
First published (updated )
CVE-2022-26704

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow

Risk 70
Severity
7.8
Input Validation, Use After Free, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted image may lead to arbitrary code execution.

1 / 8
First published (updated )
CVE-2022-26751

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow

Risk 53
Severity
7.1
Input Validation, Use After Free, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 12
Source: Apple
First published (updated )
CVE-2022-26697

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow

Risk 53
Severity
7.1
Input Validation, Use After Free, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 12
Source: Apple
First published (updated )
CVE-2022-26698

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to gain root privileges.

1 / 16
Source: MITRE
First published (updated )
CVE-2022-26721

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to gain root privileges.

1 / 16
Source: MITRE
First published (updated )
CVE-2022-26722

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 22
Source: Apple
First published (updated )
CVE-2022-26720

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.

1 / 25
Source: MITRE
First published (updated )
CVE-2022-26769

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 24
Source: Apple
First published (updated )
CVE-2022-26770

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow

Risk 79
Severity
8.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 25
Source: Apple
First published (updated )
CVE-2022-26748

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 25
Source: Apple
First published (updated )
CVE-2022-26756

Apple macOS Big SurInput Validation, Use After Free, Integer Overflow, Race Condition, Buffer Overflow

Risk 70
Severity
7.8
Input Validation, Use After Free, Integer Overflow, Race Condition, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to gain elevated privileges.

1 / 43
First published (updated )
CVE-2022-32794

redhat/httpdmod_lua Use of uninitialized value of in r:parsebody

Risk 45
Severity
7.5
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.

1 / 6
First published (updated )
CVE-2022-22719

Apple macOS Big SurBuffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free

Risk 71
Severity
7.8
Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to gain elevated privileges.

1 / 37
Source: MITRE
First published (updated )
CVE-2022-22617

redhat/jbcs-httpd24-apr-utilVulnerability in OpenSSL library

Risk 47
Severity
7.5
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A flaw was found in OpenSSL. It is possible to trigger an infinite loop by crafting a certificate that has invalid elliptic curve parameters. Since certificate parsing happens before verification of the certificate signature, any process that parses an externally supplied certificate may be subject to a denial of service attack.

1 / 48
First published (updated )
CVE-2022-0778

redhat/jbcs-httpd24-apr-utilUse After Free, Input Validation, Buffer Overflow, Integer Overflow, Race Condition

Risk 78
Severity
8.1
Use After Free, Input Validation, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A flaw was found in libxml2. A call to the xmlGetID function can return a pointer already freed when parsing an XML document with the XMLPARSEDTDVALID option and without the XMLPARSENOENT option, resulting in a use-after-free issue.

1 / 43
First published (updated )
CVE-2022-23308

debian/zshInput Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 70
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 68
Source: Apple
First published (updated )
CVE-2021-45444

redhat/jbcs-httpd24-httpdPossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier

Risk 57
Severity
8.2
Null Pointer Dereference, SSRF, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).

1 / 6

Remedy

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
First published (updated )
CVE-2021-44224

Apple macOS Big SurApple iOS, macOS, watchOS Sandbox Bypass Vulnerability

Risk 65
Severity
7.5
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Core Telephony. A deserialization issue was addressed through improved validation.

1 / 7
First published (updated )
CVE-2021-31010

Apple macOS Big SurApple Multiple Products Integer Overflow Vulnerability

Risk 85
Severity
7.8
Exploited
Input Validation, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CoreGraphics. An integer overflow was addressed with improved input validation.

1 / 7
First published (updated )
CVE-2021-30860

Apple macOS Big SurInput Validation

Risk 69
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD Kernel. A memory corruption issue was addressed with improved input validation.

1 / 4
Source: Apple
First published (updated )
CVE-2021-30790

Apple macOS Big SurRace Condition, Input Validation, Integer Overflow, Buffer Overflow

Risk 69
Severity
7.8
Race Condition, Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD Kernel. A memory corruption issue was addressed with improved input validation.

1 / 26
Source: Apple
First published (updated )
CVE-2021-30787

Apple macOS Big SurRace Condition, Input Validation, Integer Overflow, Buffer Overflow

Risk 70
Severity
7.8
Race Condition, Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AMD Kernel. A memory corruption issue was addressed with improved input validation.

1 / 28
Source: Apple
First published (updated )
CVE-2021-30784

Apple macOS Big SurInput Validation, Race Condition, Integer Overflow, Use After Free, Buffer Overflow

Risk 69
Severity
7.8
Input Validation, Race Condition, Integer Overflow, Use After Free, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ActionKit. An input validation issue was addressed with improved input validation.

1 / 40
Source: Apple
First published (updated )
CVE-2021-30792

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203