Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Release: Apple tvOS 15.7 Clear all filters
TI-2022-23090 CVE-2022-46700 · GHSA-9qwf-rgvm-3vxv

Out-of-bounds write in Apple tvOS

Priority MEDIUM 43

A memory corruption issue was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01319 Published 2022-12-15 Partial fix · 16.2, 13.1 +2 CWE-787
TI-2022-23085 CVE-2022-46695 · GHSA-hm5v-5ww3-9m4f

Clickjacking in Apple tvOS

Priority LOW 32

A spoofing issue existed in the handling of URLs.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0144 Published 2022-12-15 Fixed in 16.2, 13.1 +2 CWE-1021
TI-2022-23084 CVE-2022-46694 · GHSA-m6vx-pgv7-3f4w

Out-of-bounds write in Apple tvOS

Priority LOW 36

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00357 Published 2022-12-15 Fixed in 16.2, 15.7 +1 CWE-787
TI-2022-23081 CVE-2022-46691 · GHSA-p4fx-x9cg-v98g

Out-of-bounds write in Apple tvOS

Priority MEDIUM 43

A memory consumption issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01623 Published 2022-12-15 Partial fix · 16.2, 13.1 +2 CWE-787
TI-2022-23079 CVE-2022-46689 · GHSA-335h-x4pf-hpc2

Race condition in Apple macOS

Priority MEDIUM 63

A race condition was addressed with additional validation.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.48213 Published 2022-12-15 Fixed in 11.7, 16.2 +4 CWE-362
TI-2022-20873 CVE-2022-42864 · GHSA-g6qw-hmvp-hf86

Race condition in Apple macOS

Priority LOW 35

A race condition was addressed with improved state handling.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00901 Published 2022-12-15 Fixed in 11.7, 16.2 +4 CWE-362
TI-2022-20866 CVE-2022-42856 · GHSA-qh2r-8xvg-hm24

Type confusion in Apple tvOS

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08523 Published 2022-12-15 Partial fix · 16.2, 13.1 +2 CWE-843
TI-2022-20865 CVE-2022-42855 · GHSA-rg9c-336x-3rq5

Improper privilege management in Apple tvOS

Priority LOW 34

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00544 Published 2022-12-15 Fixed in 16.2, 13.1 +2 CWE-269
TI-2022-20862 CVE-2022-42852 · GHSA-3p9p-h6x6-85gg

Information disclosure in Apple tvOS

Priority LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01042 Published 2022-12-15 Partial fix · 16.2, 13.1 +2 CWE-200
TI-2022-20858 CVE-2022-42848 · GHSA-mv7w-74c6-4w37

Protection mechanism failure in Apple tvOS

Priority LOW 36

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0029 Published 2022-12-15 Fixed in 16.2, 15.7 CWE-693