Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

redhat/zlibBuffer Overflow, Use After Free, Race Condition, Input Validation, SQL Injection

Risk 91
Severity
9.8
Buffer Overflow, Use After Free, Race Condition, Input Validation, SQL Injection
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

A security vulnerability was found in zlib. The flaw triggered a heap-based buffer in inflate in the inflate.c function via a large gzip header extra field. This flaw is only applicable in the call inflateGetHeader.

1 / 117
First published (updated )
CVE-2022-37434

Apple tvOSInput Validation, Integer Overflow, Buffer Overflow

Risk 88
Severity
9.8
Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 16
Source: Apple
First published (updated )
CVE-2022-26711

Apple tvOSInput Validation, Integer Overflow, Buffer Overflow, Race Condition, Use After Free

Risk 88
Severity
9.8
Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 32
Source: Apple
First published (updated )
CVE-2022-26775

Apple tvOSBuffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free

Risk 88
Severity
9.8
Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 31
Source: Apple
First published (updated )
CVE-2022-26708

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 88
Severity
9.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 37
Source: Apple
First published (updated )
CVE-2022-26776

Apple macOS MontereyApple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

Risk 95
Severity
8.8
Exploited
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

1 / 4
Source: NVD
First published (updated )
CVE-2022-22620

Apple tvOSApple Multiple Products Unspecified Vulnerability

Risk 94
Severity
8.8
Exploited
Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Out-of-bounds Read
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A memory corruption issue was addressed with improved input validation.

1 / 35
Source: Apple
First published (updated )
CVE-2022-48503

debian/webkit2gtkUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition

Risk 79
Severity
8.8
Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 55
First published (updated )
CVE-2022-26709

Apple tvOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition

Risk 79
Severity
8.8
Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 55
First published (updated )
CVE-2022-26710

debian/webkit2gtkUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition

Risk 79
Severity
8.8
Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTunes 12.12.4 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 56
First published (updated )
CVE-2022-26717

debian/webkit2gtkBuffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free

Risk 79
Severity
8.8
Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 56
First published (updated )
CVE-2022-26716

debian/webkit2gtkBuffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free

Risk 79
Severity
8.8
Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 56
First published (updated )
CVE-2022-26719

redhat/zlibBuffer Overflow, Input Validation, Use After Free, Integer Overflow, Race Condition

Risk 57
Severity
8.2
Buffer Overflow, Input Validation, Use After Free, Integer Overflow, Race Condition
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 72
Source: Apple
First published (updated )
CVE-2018-25032

redhat/jbcs-httpd24-httpdPossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier

Risk 57
Severity
8.2
Null Pointer Dereference, SSRF, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).

1 / 6

Remedy

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
First published (updated )
CVE-2021-44224

redhat/jbcs-httpd24-curlDouble Free

Risk 79
Severity
8.1
Double Free
AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability was found in curl. The issue occurs if curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL. It sets up the connection to the remote server by issuing a CONNECT request to the proxy and then tunnels the rest of the protocol through. An HTTP proxy might refuse this request (HTTP proxies often only allow outgoing connections to specific port numbers, like 443 for HTTPS) and instead return a non-200 response code to the client. Due to flaws in the error/cleanup handling, this could trigger a double-free issue in curl if using one of the following schemes in the URL for the transfer: dict, gopher, gophers, ldap, ldaps, rtmp, rtmps, telnet.

1 / 5
First published (updated )
CVE-2022-42915

debian/zshInput Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 70
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 68
Source: Apple
First published (updated )
CVE-2021-45444

Apple Multiple ProductsApple Multiple Products Code Execution Vulnerability

Risk 85
Severity
7.8
Exploited
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file.

1 / 3
Source: CISA
First published (updated )
CVE-2023-41990

Apple macOS Big SurApple macOS Out-of-Bounds Write Vulnerability

Risk 97
Severity
7.8
Exploited
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

1 / 6
First published (updated )
CVE-2022-22675

Apple Multiple ProductsApple Multiple Products Kernel Privilege Escalation Vulnerability

Risk 86
Severity
7.8
Exploited
Use After Free, Input Validation
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

App Store. The issue was addressed with improved handling of protocols.

1 / 18
Source: Apple
First published (updated )
CVE-2023-41992

Apple Multiple ProductsApple Multiple Products Integer Overflow Vulnerability

Risk 91
Severity
7.8
Exploited
Zeroday
Integer Overflow, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Kernel. An integer overflow was addressed with improved input validation.

1 / 11
Source: Apple
First published (updated )
CVE-2023-32434

Apple macOS Big SurBuffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free

Risk 70
Severity
7.8
Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A validation issue existed in the handling of symlinks and was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.4. An app may be able to gain elevated privileges.

1 / 51
Source: MITRE
First published (updated )
CVE-2022-26704

Apple macOS SonomaInput Validation, Use After Free

Risk 70
Severity
7.8
Input Validation, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 22
Source: Apple
First published (updated )
CVE-2023-42899

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.

1 / 25
Source: MITRE
First published (updated )
CVE-2022-26769

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 24
Source: Apple
First published (updated )
CVE-2022-26770

Apple macOS Big SurInput Validation, Use After Free, Integer Overflow, Race Condition, Buffer Overflow

Risk 70
Severity
7.8
Input Validation, Use After Free, Integer Overflow, Race Condition, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to gain elevated privileges.

1 / 43
First published (updated )
CVE-2022-32794

Apple macOS Big SurBuffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free

Risk 71
Severity
7.8
Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Use After Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to gain elevated privileges.

1 / 37
Source: MITRE
First published (updated )
CVE-2022-22617

ubuntu/cupsCUPS vulnerable to use-after-free in cupsdAcceptClient()

Risk 60
Severity
7.7
Use After Free, Race Condition
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Accounts. A privacy issue was addressed with improved private data redaction for log entries.

1 / 15
Source: Apple
First published (updated )
CVE-2023-34241

redhat/httpdmod_lua Use of uninitialized value of in r:parsebody

Risk 45
Severity
7.5
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.

1 / 6
First published (updated )
CVE-2022-22719

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow

Risk 53
Severity
7.1
Input Validation, Use After Free, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 12
Source: Apple
First published (updated )
CVE-2022-26697

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow

Risk 53
Severity
7.1
Input Validation, Use After Free, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 12
Source: Apple
First published (updated )
CVE-2022-26698

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203