Vulnerabilities

TI-2022-06859 CVE-2022-22592 · GHSA-4r4q-3gg9-w59h

Apple iOS and iPadOS: Processing maliciously crafted web content may prevent Content…

LOW 32

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01623 Published 2022-03-18 Partial fix · 15.3, 12.2 +1

TI-2022-06861 CVE-2022-22594 · GHSA-3xf9-qwxv-r3r4

Origin validation error in Apple iOS and iPadOS

LOW 30

A cross-origin issue in the IndexDB API was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00821 Published 2022-03-18 Partial fix · 15.3, 12.2 +1 CWE-346

TI-2022-06860 CVE-2022-22593 · GHSA-85p9-rg6j-hvqw

Buffer overflow in Apple iOS and iPadOS

LOW 37

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0148 Published 2022-03-18 Fixed in 15.3, 12.2 +3 CWE-120

TI-2022-06857 CVE-2022-22590 · GHSA-8gq6-m624-5hx9

Use after free in Apple iOS and iPadOS

MEDIUM 41

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01555 Published 2022-03-18 Partial fix · 15.3, 12.2 +1 CWE-416

TI-2022-06856 CVE-2022-22589 · GHSA-4c33-fwgf-qv6r

Apple iOS and iPadOS: Processing a maliciously crafted mail message may lead to running…

LOW 31

A validation issue was addressed with improved input sanitization.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02005 Published 2022-03-18 Partial fix · 15.3, 12.2 +1

TI-2022-06851 CVE-2022-22584 · GHSA-7qqr-c8r6-gcwc

Out-of-bounds write in Apple iOS and iPadOS

LOW 37

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01611 Published 2022-03-18 Fixed in 15.3, 12.2 +1 CWE-787

TI-2022-06854 CVE-2022-22587 · GHSA-p75p-vc6x-p9wf

Out-of-bounds write in Apple iOS and iPadOS

CRITICAL 100KEV

A memory corruption issue was addressed with improved input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11638 Published 2022-03-18 Fixed in 15.3, 12.2 +1 CWE-787

TI-2022-06852 CVE-2022-22585 · GHSA-9fx7-23qc-wwjv

Link following in Apple iOS and iPadOS

LOW 36

An issue existed within the path validation logic for symlinks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01654 Published 2022-03-18 Fixed in 15.3, 12.2 +2 CWE-59

TI-2022-06848 CVE-2022-22579 · GHSA-mmpc-gf74-jmcv

Apple iOS and iPadOS: Processing a maliciously crafted STL file may lead to unexpected…

LOW 38

An information disclosure issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01803 Published 2022-03-18 Fixed in 15.3, 12.2 +2

TI-2022-06847 CVE-2022-22578 · GHSA-c93r-5847-jr3r

Apple iOS and iPadOS: A malicious application may be able to gain root privileges

LOW 36

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00983 Published 2022-03-18 Fixed in 15.3, 12.2 +1

Vulnerabilities

Filters