Where
AND
AND
-Infinity
0
Severity
5.5
Input Validation, Use After Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory.

1 / 14
First published (updated )
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited..

1 / 3
First published (updated )
Severity
6.1
Input Validation, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

A flaw was found in WebKitGTK. A validation issue was addressed with improved input sanitization.

Reference: https://webkitgtk.org/security/WSA-2022-0002.html

1 / 40
Source: Red Hat
First published (updated )
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose sensitive user information.

1 / 3
Source: MITRE
First published (updated )
Severity
5.5
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious app may be able to bypass signature validation.

1 / 49
First published (updated )
Severity
4.3
Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AMD. A memory corruption issue was addressed with improved input validation.

1 / 50
Source: Apple
First published (updated )
Severity
5.5
Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6. An app may be able to read arbitrary files.

1 / 42
First published (updated )
Severity
5.5
Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AMD. A memory corruption issue was addressed with improved input validation.

1 / 54
Source: Apple
First published (updated )
Severity
6.7
Input Validation
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AMD. A memory corruption issue was addressed with improved input validation.

1 / 3
Source: Apple
First published (updated )
Severity
5.5
Input Validation, Integer Overflow, Buffer Overflow, Infoleak
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accelerate Framework. A memory consumption issue was addressed with improved memory handling.

1 / 64
Source: Apple
First published (updated )
Severity
5.5
Null Pointer Dereference, Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing an image may lead to a denial-of-service.

1 / 30
First published (updated )
Severity
5.5
Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AMD. A memory corruption issue was addressed with improved input validation.

1 / 41
Source: Apple
First published (updated )
Severity
5.5
Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to leak sensitive user information.

1 / 38
First published (updated )
Severity
4.4
Buffer Overflow, Input Validation
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 14
Source: Apple
First published (updated )
Severity
5.5
Input Validation, Integer Overflow, Buffer Overflow, Infoleak
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AMD. A memory corruption issue was addressed with improved input validation.

1 / 19
Source: Apple
First published (updated )
Severity
5.5
Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AMD. A memory corruption issue was addressed with improved input validation.

1 / 41
Source: Apple
First published (updated )
Severity
5.9
Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

AMD. A memory corruption issue was addressed with improved input validation.

1 / 48
Source: Apple
First published (updated )
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5, macOS Monterey 12.3. A local user may be able to write arbitrary files.

1 / 2
First published (updated )
Severity
5.5
Input Validation, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

apache. Multiple issues were addressed by updating apache to version 2.4.53.

1 / 39
Source: Apple
First published (updated )
Severity
5.5
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 48
Source: Apple
First published (updated )
Severity
5.5
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 54
Source: Apple
First published (updated )
Severity
6.3
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 58
Source: Apple
First published (updated )
Severity
5.5
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

1 / 69
Source: MITRE
First published (updated )
Severity
6.5
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 56
Source: Apple
First published (updated )
Severity
5.5
Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 39
Source: Apple
First published (updated )
Severity
5.5
Input Validation, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Accelerate Framework. A memory consumption issue was addressed with improved memory handling.

1 / 33
Source: Apple
First published (updated )
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

FontParser. An out-of-bounds read was addressed with improved bounds checking.

1 / 6
First published (updated )
Severity
6.3
Input Validation, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Model I/O. An out-of-bounds read was addressed with improved input validation.

1 / 4
First published (updated )
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A validation issue related to hard link behavior was addressed with improved sandbox restrictions. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to bypass certain Privacy preferences.

1 / 2
First published (updated )
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may bypass Gatekeeper checks.

1 / 2
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
Ā© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203