Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
unauthenticated remote attacker to crash affected devices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-310038.pdf
CVE ID: CVE-2022-26650 State: PUBLISHED Published: 2022-05-17T08:05:10 Last Updated: 2024-08-03T05:11:43.499Z Vendors: Apache Software Foundation Products: Apache ShenYu (incubating) Problem Types: CWE-1333 Description: In Apache ShenYui, ShenYu-Bootstrap, RegexPredicateJudge.java uses Pattern.matches(conditionData.getParamValue(), realData) to make judgments, where both parameters are controllable by the user. This can cause an attacker pass in malicious regular expressions and characters causing a resource exhaustion. This issue affects Apache ShenYu (incubating) 2.4.0, 2.4.1 and 2.4.2 and is fixed in 2.4.3. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apa
.4.1 and 2.4.2 and is fixed in 2.4.3. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/8rp33m3nm4bwtx3qx76mqynth3t3d673 - http://www.openwall.com/lists/oss-security/2022/05/17/3
CVE ID: CVE-2022-26651 State: PUBLISHED Published: 2022-04-15T00:00:00 Last Updated: 2024-08-03T05:11:43.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The func_odbc module provides possibly inadequate escaping functionality for backslash characters in SQL queries, resulting in user-provided data creating a broken SQL query or possibly a SQL injection. This is fixed in 16.25.2, 18.11.2, and 19.3.2, and 16.8-cert14. Additional Analyst Notes: - CVE Program Container: References: - https://downloads.asterisk.org/pub/security/ - https://downloads.asterisk.org/pub/security/AST-2022-003.ht
References: - https://downloads.asterisk.org/pub/security/ - https://downloads.asterisk.org/pub/security/AST-2022-003.html - http://packetstormsecurity.com/files/166746/Asterisk-Project-Security-Advisory-AST-2022-003.html - https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html - https://www.debian.org/security/2022/dsa-5285
CVE ID: CVE-2022-26652 State: PUBLISHED Published: 2022-03-10T03:48:44 Last Updated: 2024-08-03T05:11:44.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nats-io/nats-server/releases - https://github.com/nats-io/nats-server/security/advisories/GHSA-6h3m-36w8-hv68 - https://advisories.nats.io/CVE/CVE-2022-26652.txt - http://www.openwall.com/lists/oss-security/2022/03/10/1
CVE ID: CVE-2022-26653 State: PUBLISHED Published: 2022-04-16T15:23:56 Last Updated: 2024-08-03T05:11:44.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details (such as the username and GUID of an administrator). Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/remote-desktop-management/advisory/cve-2022-26653.html - https://raxis.com/blog/cve-2022-26653-and-cve-2022-26777
CVE ID: CVE-2022-26654 State: PUBLISHED Published: 2022-07-17T20:14:33 Last Updated: 2024-08-03T05:11:43.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 27.3 allows remote attackers to force a software abort via HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-26654
CVE ID: CVE-2022-26655 State: PUBLISHED Published: 2022-07-17T20:18:02 Last Updated: 2024-08-03T05:11:43.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity 27.x before 27.3 has Improper Input Validation. The client API allows remote attackers to trigger a software abort via a gateway call into Teams. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-26655
CVE ID: CVE-2022-26656 State: PUBLISHED Published: 2022-07-17T20:30:10 Last Updated: 2024-08-03T05:11:44.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via One Touch Join. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-26656
CVE ID: CVE-2022-26657 State: PUBLISHED Published: 2022-07-17T20:30:27 Last Updated: 2024-08-03T05:11:44.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm
CVE ID: CVE-2022-26659 State: PUBLISHED Published: 2022-03-25T20:50:50 Last Updated: 2024-08-03T05:11:43.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docker Desktop installer, when run elevated, will write its log files to a location not writable by non-administrator users. Additional Analyst Notes: - CVE Program Container: References: - https://docs.docker.com/docker-for-windows/release-notes/ - https://docs.docker.com/desktop/windows/release
eferences: - https://docs.docker.com/docker-for-windows/release-notes/ - https://docs.docker.com/desktop/windows/release-notes/ - https://github.com/hmnthabit/Advisories/blob/master/CVE-2022-26659.md
CVE ID: CVE-2022-26660 State: PUBLISHED Published: 2022-03-16T14:34:43 Last Updated: 2024-08-03T05:11:44.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: RunAsSpc 4.0 uses a universal and recoverable encryption key. In possession of a file encrypted by RunAsSpc, an attacker can recover the credentials that were used. Additional Analyst Notes: - CVE Program Container: References: - https://robotronic.de/secureen.html
CVE ID: CVE-2022-26661 State: PUBLISHED Published: 2022-03-07T22:40:11 Last Updated: 2024-08-03T05:11:44.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.tryton.org/issue11219 - https://discuss.tryton.org/t/securi
t Notes: - CVE Program Container: References: - https://bugs.tryton.org/issue11219 - https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059 - https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html - https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html - https://www.debian.org/security/2022/dsa-5098 - https://www.debian.org/security/2022/dsa-5099
CVE ID: CVE-2022-26662 State: PUBLISHED Published: 2022-03-07T22:40:00 Last Updated: 2024-08-03T05:11:44.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An unauthenticated user can send a crafted XML-RPC message to consume all the resources of the server. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.tryton.org/t/security-release-for-issue1121
tional Analyst Notes: - CVE Program Container: References: - https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059 - https://bugs.tryton.org/issue11244 - https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html - https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html - https://www.debian.org/security/2022/dsa-5098 - https://www.debian.org/security/2022/dsa-5099
CVE ID: CVE-2022-26665 State: PUBLISHED Published: 2022-04-18T14:37:48 Last Updated: 2024-08-03T05:11:43.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Insecure Direct Object Reference issue exists in the Tyler Odyssey Portal platform before 17.1.20. This may allow an external party to access sensitive case records. Additional Analyst Notes: - CVE Program Container: References: - https://www.calbar.ca.gov/About-Us/News/Data-Breach-Updates - https://www.tylertech.com/dataharvest - https://www.judyrecords.com/what-happened-with-tyler-technologies - https://www.judyrecords.com/info - https://news.ycombinator.com/item?id=30502117
CVE ID: CVE-2022-26666 State: PUBLISHED Published: 2022-03-29T16:37:11.423Z Last Updated: 2025-04-16T16:35:44.682Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerECC.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01
CVE ID: CVE-2022-26667 State: PUBLISHED Published: 2022-03-29T16:37:13.735Z Last Updated: 2025-04-16T16:35:14.982Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetDemandAnalysisData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01
CVE ID: CVE-2022-26668 State: PUBLISHED Published: 2022-06-20T05:30:29.581254Z Last Updated: 2024-09-17T02:42:54.277Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: ASUS Products: Control Center Problem Types: CWE-269 Description: ASUS Control Center API has a broken access control vulnerability. An unauthenticated remote attacker can call privileged API functions to perform partial system operations or cause partial disrupt of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6055-c6500-1.html
CVE ID: CVE-2022-26669 State: PUBLISHED Published: 2022-06-20T05:30:31.029098Z Last Updated: 2024-09-17T02:42:16.801Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ASUS Products: Control Center Problem Types: CWE-89 Description: ASUS Control Center is vulnerable to SQL injection. An authenticated remote attacker with general user privilege can inject SQL command to specific API parameters to acquire database schema or access data. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6056-b0d90-1.html
CVE ID: CVE-2022-26670 State: PUBLISHED Published: 2022-04-07T18:22:39.276740Z Last Updated: 2024-09-17T03:07:22.208Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: D-Link Products: DIR-878 Problem Types: CWE-78 Description: D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack to execute arbitrary system commands to control the system or disrupt service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5972-c259e-1.html
CVE ID: CVE-2022-26671 State: PUBLISHED Published: 2022-04-07T18:22:40.988495Z Last Updated: 2024-09-17T00:31:07.808Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: TAIWAN SECOM CO., LTD., Products: Personnel Attendance Management system Problem Types: CWE-798 Description: Taiwan Secom Dr.ID Access Control system’s login page has a hard-coded credential in the source code. An unauthenticated remote attacker can use the hard-coded credential to acquire partial system information and modify system setting to cause partial disrupt of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5971-b691f-1.html
CVE ID: CVE-2022-26672 State: PUBLISHED Published: 2022-04-22T06:50:16.927392Z Last Updated: 2024-09-16T19:24:14.105Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: ASUS Products: WebStorage Problem Types: CWE-798 Description: ASUS WebStorage has a hardcoded API Token in the APP source code. An unauthenticated remote attacker can use this token to establish connections with the server and carry out login attempts to general user accounts. A successful login to a general user account allows the attacker to access, modify or delete this user account information. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132
ccount information. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6041-7bd67-1.html
CVE ID: CVE-2022-26673 State: PUBLISHED Published: 2022-04-22T06:50:18.452525Z Last Updated: 2024-09-17T01:41:18.038Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: ASUS Products: RT-AX88U Problem Types: CWE-79 Description: ASUS RT-AX88U has insufficient filtering for special characters in the HTTP header parameter. A remote attacker with general user privilege can exploit this vulnerability to inject JavaScript and perform Stored Cross-Site Scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6042-6cc0f-1.html
CVE ID: CVE-2022-26674 State: PUBLISHED Published: 2022-04-22T06:50:19.853889Z Last Updated: 2024-09-16T17:22:36.117Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ASUS Products: RT-AX88U Problem Types: CWE-134 Description: ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory address and perform remote arbitrary code execution, arbitrary system operation or disrupt service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6043-0f72c-1.html
CVE ID: CVE-2022-26675 State: PUBLISHED Published: 2022-04-07T18:22:42.703916Z Last Updated: 2024-09-17T01:56:47.206Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: aEnrich Products: a+HRD Problem Types: CWE-22 Description: aEnrich a+HRD has inadequate filtering for special characters in URLs. An unauthenticated remote attacker can bypass authentication and perform path traversal attacks to access arbitrary files under website root directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5969-a5d4a-1.html
CVE ID: CVE-2022-26676 State: PUBLISHED Published: 2022-04-07T18:22:44.359529Z Last Updated: 2024-09-16T17:24:17.624Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: aEnrich Products: a+HRD Problem Types: CWE-269 Description: aEnrich a+HRD has inadequate privilege restrictions, an unauthenticated remote attacker can use the API function to upload and execute malicious scripts to control the system or disrupt service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5970-2f405-1.html
CVE ID: CVE-2022-26688 State: PUBLISHED Published: 2022-05-26T17:46:24 Last Updated: 2024-08-03T05:11:44.431Z Vendors: Apple Products: macOS Problem Types: A malicious app with root privileges may be able to modify the contents of system files Description: An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious app with root privileges may be able to modify the contents of system files. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213183 - https://support.apple.com/en-us/HT213184 - https://support.apple.com
ences: - https://support.apple.com/en-us/HT213183 - https://support.apple.com/en-us/HT213184 - https://support.apple.com/en-us/HT213185
CVE ID: CVE-2022-26689 State: REJECTED Published: N/A Last Updated: 2023-05-08T00:00:00 Description: No description available.
CVE ID: CVE-2022-26690 State: PUBLISHED Published: 2022-05-26T17:47:10 Last Updated: 2024-08-03T05:11:44.864Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to modify protected parts of the file system Description: Description: A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to modify protected parts of the file system. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213183
CVE ID: CVE-2022-26691 State: PUBLISHED Published: 2022-05-26T17:47:59 Last Updated: 2024-08-03T05:11:44.807Z Vendors: Apple Products: macOS Problem Types: An application may be able to gain elevated privileges Description: A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213183 - https://support.apple.com/en-us/HT213184 - https://support.apple.com/en-us/HT213185 - https://lists.debian.org/debian-lts-announce/2022/05/msg00039.htm
/HT213184 - https://support.apple.com/en-us/HT213185 - https://lists.debian.org/debian-lts-announce/2022/05/msg00039.html - https://www.debian.org/security/2022/dsa-5149 - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0026/MNDT-2022-0026.md - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQ6TD7F3VRITPEHFDHZHK7MU6FEBMZ5U/ - https://github.com/OpenPrinting/cups/commit/de4f8c196106033e4c372dce3e91b9d42b0b9444 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQRIT4H75XV6M42K7ZTARWZ7YLLYQHPO/
CVE ID: CVE-2022-26692 State: REJECTED Published: N/A Last Updated: 2023-05-08T00:00:00 Description: No description available.
CVE ID: CVE-2022-26693 State: PUBLISHED Published: 2022-05-26T18:36:42 Last Updated: 2024-08-03T05:11:44.628Z Vendors: Apple Products: macOS Problem Types: A plug-in may be able to inherit the application's permissions and access user data Description: This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. A plug-in may be able to inherit the application's permissions and access user data. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213257
CVE ID: CVE-2022-26694 State: PUBLISHED Published: 2022-05-26T18:37:54 Last Updated: 2024-08-03T05:11:44.874Z Vendors: Apple Products: macOS Problem Types: A plug-in may be able to inherit the application's permissions and access user data Description: This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. A plug-in may be able to inherit the application's permissions and access user data. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213257
CVE ID: CVE-2022-26696 State: PUBLISHED Published: 2022-09-20T20:19:08.000Z Last Updated: 2025-05-28T15:49:09.682Z Vendors: Apple Products: macOS Problem Types: A sandboxed process may be able to circumvent sandbox restrictions Description: This issue was addressed with improved environment sanitization. This issue is fixed in macOS Monterey 12.4. A sandboxed process may be able to circumvent sandbox restrictions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213257
CVE ID: CVE-2022-26697 State: PUBLISHED Published: 2022-05-26T18:39:10 Last Updated: 2024-08-03T05:11:44.739Z Vendors: Apple Products: Security Update - Catalina, macOS Problem Types: Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory Description: An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory. Additional Analyst Notes: - CVE Program Container: References
d application termination or disclosure of process memory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213255 - https://support.apple.com/en-us/HT213256 - https://support.apple.com/en-us/HT213257
CVE ID: CVE-2022-26698 State: PUBLISHED Published: 2022-05-26T18:40:02 Last Updated: 2024-08-03T05:11:44.099Z Vendors: Apple Products: Security Update - Catalina, macOS Problem Types: Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory Description: An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory. Additional Analyst Notes: - CVE Program Container: References:
application termination or disclosure of process memory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213255 - https://support.apple.com/en-us/HT213256 - https://support.apple.com/en-us/HT213257
CVE ID: CVE-2022-26699 State: PUBLISHED Published: 2023-08-14T22:40:34.820Z Last Updated: 2024-10-29T14:15:34.392Z Vendors: Apple Products: macOS Problem Types: An app may be able to cause a denial-of-service to Endpoint Security clients Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to cause a denial-of-service to Endpoint Security clients. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488
CVE ID: CVE-2022-26700 State: PUBLISHED Published: 2022-09-23T18:58:31.000Z Last Updated: 2025-05-22T18:07:32.912Z Vendors: Apple Products: macOS, watchOS Problem Types: Processing maliciously crafted web content may lead to code execution Description: A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213258 - https://support.apple.com/en-us/HT213253 - https://support.apple
eferences: - https://support.apple.com/en-us/HT213258 - https://support.apple.com/en-us/HT213253 - https://support.apple.com/en-us/HT213254 - https://support.apple.com/en-us/HT213257 - https://support.apple.com/en-us/HT213260