Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

23 records

Release: Apple watchOS 9.2 Clear all filters
TI-2022-23090 CVE-2022-46700 · GHSA-9qwf-rgvm-3vxv

Out-of-bounds write in Apple tvOS

Priority MEDIUM 43

A memory corruption issue was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01319 Published 2022-12-15 Partial fix · 16.2, 13.1 +2 CWE-787
TI-2022-23089 CVE-2022-46699 · GHSA-vpx9-p4q4-3hhh

Out-of-bounds write in Apple tvOS

Priority MEDIUM 43

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01303 Published 2022-12-15 Partial fix · 16.2, 13.1 +1 CWE-787
TI-2022-23086 CVE-2022-46696 · GHSA-hm5f-ff95-4cm4

Out-of-bounds write in Apple tvOS

Priority MEDIUM 43

A memory corruption issue was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01346 Published 2022-12-15 Fixed in 16.2, 13.1 +1 CWE-787
TI-2022-23085 CVE-2022-46695 · GHSA-hm5v-5ww3-9m4f

Clickjacking in Apple tvOS

Priority LOW 32

A spoofing issue existed in the handling of URLs.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0144 Published 2022-12-15 Fixed in 16.2, 13.1 +2 CWE-1021
TI-2022-23084 CVE-2022-46694 · GHSA-m6vx-pgv7-3f4w

Out-of-bounds write in Apple tvOS

Priority LOW 36

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00357 Published 2022-12-15 Fixed in 16.2, 15.7 +1 CWE-787
TI-2022-23083 CVE-2022-46693 · GHSA-qjg8-52hj-5hj8

Out-of-bounds write in Apple iCloud for Windows

Priority LOW 36

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00377 Published 2022-12-15 Fixed in 14.1, 16.2 +2 CWE-787
TI-2022-23081 CVE-2022-46691 · GHSA-p4fx-x9cg-v98g

Out-of-bounds write in Apple tvOS

Priority MEDIUM 43

A memory consumption issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01623 Published 2022-12-15 Partial fix · 16.2, 13.1 +2 CWE-787
TI-2022-23080 CVE-2022-46690 · GHSA-v86p-p58r-p852

Out-of-bounds write in Apple tvOS

Priority LOW 37

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00556 Published 2022-12-15 Fixed in 16.2, 13.1 +1 CWE-787
TI-2022-23079 CVE-2022-46689 · GHSA-335h-x4pf-hpc2

Race condition in Apple macOS

Priority MEDIUM 63

A race condition was addressed with additional validation.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.48213 Published 2022-12-15 Fixed in 11.7, 16.2 +4 CWE-362
TI-2022-20876 CVE-2022-42867 · GHSA-jhmj-whj3-74pr

Use after free in Apple tvOS

Priority HIGH 66

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.34815 Published 2022-12-15 Partial fix · 16.2, 13.1 +1 CWE-416
TI-2022-20875 CVE-2022-42866 · GHSA-xc3v-8w4w-w63x

Information disclosure in Apple tvOS

Priority LOW 25

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00338 Published 2022-12-15 Fixed in 16.2, 13.1 +1 CWE-200
TI-2022-20874 CVE-2022-42865 · GHSA-xfwv-95wj-h3jj

Improper access control in Apple tvOS

Priority LOW 25

This issue was addressed by enabling hardened runtime.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00316 Published 2022-12-15 Fixed in 16.2, 13.1 +1 CWE-284
TI-2022-20873 CVE-2022-42864 · GHSA-g6qw-hmvp-hf86

Race condition in Apple macOS

Priority LOW 35

A race condition was addressed with improved state handling.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00901 Published 2022-12-15 Fixed in 11.7, 16.2 +4 CWE-362
TI-2022-20872 CVE-2022-42863 · GHSA-34j8-gp4f-rgwg

Out-of-bounds write in Apple tvOS

Priority MEDIUM 43

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01236 Published 2022-12-15 Partial fix · 16.2, 13.1 +1 CWE-787
TI-2022-20868 CVE-2022-42859 · GHSA-jxvj-5mm5-3cx5

Improper access control in Apple macOS

Priority LOW 25

Multiple issues were addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00331 Published 2022-12-15 Fixed in 13.1, 16.2 +1 CWE-284
TI-2022-20862 CVE-2022-42852 · GHSA-3p9p-h6x6-85gg

Information disclosure in Apple tvOS

Priority LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01042 Published 2022-12-15 Partial fix · 16.2, 13.1 +2 CWE-200
TI-2022-20859 CVE-2022-42849 · GHSA-4cm7-7r9p-hq66

Improper privilege management in Apple tvOS

Priority LOW 36

An access issue existed with privileged API calls.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00264 Published 2022-12-15 Fixed in 16.2, 9.2 CWE-269
TI-2022-20855 CVE-2022-42845 · GHSA-9cph-hcr9-fvgm

Out-of-bounds write in Apple macOS

Priority LOW 37

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01803 Published 2022-12-15 Fixed in 11.7, 16.2 +3 CWE-787
TI-2022-20853 CVE-2022-42843 · GHSA-4hf4-g256-gxvm

Information disclosure in Apple tvOS

Priority LOW 39

This issue was addressed with improved data protection.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00391 Published 2022-12-15 Fixed in 16.2, 13.1 +1 CWE-200
TI-2022-20852 CVE-2022-42842 · GHSA-248j-xg68-6w85

Out-of-bounds write in Apple macOS

Priority MEDIUM 53

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02439 Published 2022-12-15 Fixed in 11.7, 16.2 +3 CWE-787
TI-2022-20847 CVE-2022-42837 · GHSA-qg7p-gqjj-g2r8

Improper input validation in Apple macOS

Priority MEDIUM 53

An issue existed in the parsing of URLs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02276 Published 2022-12-15 Fixed in 13.1, 16.2 +2 CWE-20