Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-32757 State: PUBLISHED Published: 2023-06-15T02:55:22.158Z Last Updated: 2024-12-12T21:39:16.039Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Directory Suite VA Problem Types: CWE-307 Description: IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 228510. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7001693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/228510
CVE ID: CVE-2022-32759 State: PUBLISHED Published: 2024-07-25T17:11:44.253Z Last Updated: 2024-08-03T07:46:44.968Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Directory Integrator, Security Verify Directory Integrator Problem Types: CWE-613 Description: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an unauthorized user to obtain sensitive information. IBM X-Force ID: 228565. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7161446 - https://exchange.xfor
nrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7161446 - https://exchange.xforce.ibmcloud.com/vulnerabilities/228565
CVE ID: CVE-2022-32760 State: PUBLISHED Published: 2022-10-25T16:33:43.141Z Last Updated: 2025-04-15T18:47:26.353Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-489 Description: A denial of service vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to denial of service. An attacker can send a malicious XML payload to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_re
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1555
CVE ID: CVE-2022-32761 State: PUBLISHED Published: 2022-08-22T18:25:58.437Z Last Updated: 2025-04-15T18:50:53.295Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: WWBN Products: AVideo Problem Types: CWE-73 Description: An information disclosure vulnerability exists in the aVideoEncoderReceiveImage functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088
ner: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1549
CVE ID: CVE-2022-32762 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:39.402Z Description: No description available.
CVE ID: CVE-2022-32763 State: PUBLISHED Published: 2022-12-19T10:00:14.221Z Last Updated: 2025-04-15T18:38:30.082Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Lansweeper Products: lansweeper Problem Types: CWE-184 Description: A cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TA
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1541
CVE ID: CVE-2022-32764 State: PUBLISHED Published: 2023-02-16T20:00:04.076Z Last Updated: 2025-01-27T18:20:28.566Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) DSA software Problem Types: escalation of privilege Description: Description: Race condition in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00725.html
CVE ID: CVE-2022-32765 State: PUBLISHED Published: 2022-10-25T16:33:44.102Z Last Updated: 2025-04-15T18:47:17.216Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Robustel Products: R1510 Problem Types: CWE-77 Description: An OS command injection vulnerability exists in the sysupgrade command injection functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1576
CVE ID: CVE-2022-32766 State: PUBLISHED Published: 2023-05-10T13:16:47.190Z Last Updated: 2025-01-27T18:09:07.337Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) BIOS firmware Problem Types: escalation of privilege, CWE-20 Description: Improper input validation for some Intel(R) BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html
CVE ID: CVE-2022-32768 State: PUBLISHED Published: 2022-08-22T18:26:26.065Z Last Updated: 2025-04-15T18:50:44.932Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: WWBN Products: AVideo Problem Types: CWE-862 Description: Multiple authentication bypass vulnerabilities exist in the objects id handling functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request by an authenticated user can lead to unauthorized access and takeover of resources. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules plugin, allowing an attacker to bypass authentication by guessing a
lity.This vulnerability exists in the Live Schedules plugin, allowing an attacker to bypass authentication by guessing a sequential ID, allowing them to take over the another user's streams. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1536
CVE ID: CVE-2022-32769 State: PUBLISHED Published: 2022-08-22T18:26:47.619Z Last Updated: 2025-04-15T18:50:37.442Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: WWBN Products: AVideo Problem Types: CWE-862 Description: Multiple authentication bypass vulnerabilities exist in the objects id handling functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request by an authenticated user can lead to unauthorized access and takeover of resources. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Playlists plugin, allowing an attacker to bypass authentication by guessing a sequ
lity.This vulnerability exists in the Playlists plugin, allowing an attacker to bypass authentication by guessing a sequential ID, allowing them to take over the another user's playlists. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1536
CVE ID: CVE-2022-32770 State: PUBLISHED Published: 2022-08-22T18:27:12.508Z Last Updated: 2025-04-15T18:50:30.160Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: WWBN Products: AVideo Problem Types: CWE-79 Description: A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability.This vulnerability arrises from the "toast" parameter which is inserted into the document with insufficient sanitization. Addit
lnerability arrises from the "toast" parameter which is inserted into the document with insufficient sanitization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1538
CVE ID: CVE-2022-32771 State: PUBLISHED Published: 2022-08-22T18:27:37.570Z Last Updated: 2025-04-15T18:50:23.505Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: WWBN Products: AVideo Problem Types: CWE-79 Description: A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability.This vulnerability arrises from the "success" parameter which is inserted into the document with insufficient sanitization. Add
lnerability arrises from the "success" parameter which is inserted into the document with insufficient sanitization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1538
CVE ID: CVE-2022-32772 State: PUBLISHED Published: 2022-08-22T18:27:59.002Z Last Updated: 2025-04-15T18:50:16.607Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: WWBN Products: AVideo Problem Types: CWE-79 Description: A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability.This vulnerability arrises from the "msg" parameter which is inserted into the document with insufficient sanitization. Additio
lnerability arrises from the "msg" parameter which is inserted into the document with insufficient sanitization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1538
CVE ID: CVE-2022-32773 State: PUBLISHED Published: 2022-10-25T16:33:45.118Z Last Updated: 2025-04-15T18:47:10.133Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to arbitrary command execution. An attacker can send a malicious XML payload to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1556
CVE ID: CVE-2022-32774 State: PUBLISHED Published: 2022-11-21T16:05:35.031Z Last Updated: 2025-04-15T18:40:22.174Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely deleting objects associated with pages, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user vi
trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted, malicious site if the browser plugin extension is enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1600
CVE ID: CVE-2022-32775 State: PUBLISHED Published: 2022-10-25T16:33:46.088Z Last Updated: 2025-04-15T18:47:02.422Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-190 Description: An integer overflow vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to memory corruption. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
gger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1564
CVE ID: CVE-2022-32776 State: PUBLISHED Published: 2022-11-08T18:35:40.759137Z Last Updated: 2024-09-17T00:30:40.745Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Advanced Ads GmbH Products: Advanced Ads – Ad Manager & AdSense Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Advanced Ads GmbH Advanced Ads – Ad Manager & AdSense plugin <= 1.31.1 on WordPress. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/advanced-ads/wordpress-advanced-ads-ad-manager-adsense-plugin-1-31-1-authenticated-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
ess-advanced-ads-ad-manager-adsense-plugin-1-31-1-authenticated-stored-cross-site-scripting-xss-vulnerability?_s_id=cve - https://wordpress.org/plugins/advanced-ads/
CVE ID: CVE-2022-32777 State: PUBLISHED Published: 2022-08-22T18:28:21.627Z Last Updated: 2025-04-15T18:50:09.779Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: WWBN Products: AVideo Problem Types: CWE-732 Description: An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cookie and the pass cookie miss the HttpOnly flag, making them accessible via JavaScript. The session cookie also misses the secure flag, which allows the session cookie to be leaked over non-HTTPS connections. This could allow an attacker to steal the session cookie via crafted HTTP requests.This vulnerabi
non-HTTPS connections. This could allow an attacker to steal the session cookie via crafted HTTP requests.This vulnerabilty is for the session cookie which can be leaked via JavaScript. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1542
CVE ID: CVE-2022-32778 State: PUBLISHED Published: 2022-08-22T18:28:48.542Z Last Updated: 2025-04-15T18:50:01.292Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: WWBN Products: AVideo Problem Types: CWE-732 Description: An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cookie and the pass cookie miss the HttpOnly flag, making them accessible via JavaScript. The session cookie also misses the secure flag, which allows the session cookie to be leaked over non-HTTPS connections. This could allow an attacker to steal the session cookie via crafted HTTP requests.This vulnerabi
non-HTTPS connections. This could allow an attacker to steal the session cookie via crafted HTTP requests.This vulnerability is for the pass cookie, which contains the hashed password and can be leaked via JavaScript. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1542
CVE ID: CVE-2022-32779 State: REJECTED Published: N/A Last Updated: 2023-05-08T00:00:00 Description: No description available.
CVE ID: CVE-2022-32781 State: PUBLISHED Published: 2022-09-23T18:58:31.000Z Last Updated: 2025-05-22T15:18:45.460Z Vendors: Apple Products: macOS Problem Types: An app with root privileges may be able to access private information Description: This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5, Security Update 2022-005 Catalina, macOS Big Sur 11.6.8. An app with root privileges may be able to access private information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213258 - https://support.apple.com/en-us/HT213257 - https://support.apple.com/e
ces: - https://support.apple.com/en-us/HT213258 - https://support.apple.com/en-us/HT213257 - https://support.apple.com/en-us/HT213344 - https://support.apple.com/en-us/HT213343
CVE ID: CVE-2022-32782 State: PUBLISHED Published: 2022-09-23T18:58:31.000Z Last Updated: 2025-05-22T15:16:37.802Z Vendors: Apple Products: macOS Problem Types: An app with root privileges may be able to access private information Description: This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.4. An app with root privileges may be able to access private information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213257
CVE ID: CVE-2022-32783 State: PUBLISHED Published: 2022-09-23T18:58:32.000Z Last Updated: 2025-05-22T19:28:29.260Z Vendors: Apple Products: macOS Problem Types: An app may gain unauthorized access to Bluetooth Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. An app may gain unauthorized access to Bluetooth. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213257
CVE ID: CVE-2022-32784 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T16:24:03.511Z Vendors: Apple Products: Safari, iOS and iPadOS Problem Types: Visiting a maliciously crafted website may leak sensitive data Description: The issue was addressed with improved UI handling. This issue is fixed in Safari 15.6, iOS 15.6 and iPadOS 15.6. Visiting a maliciously crafted website may leak sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213346 - https://support.apple.com/en-us/HT213341
CVE ID: CVE-2022-32785 State: PUBLISHED Published: 2022-09-23T18:58:31.000Z Last Updated: 2025-05-22T19:51:47.171Z Vendors: Apple Products: macOS Problem Types: Processing an image may lead to a denial-of-service Description: A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing an image may lead to a denial-of-service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213345 - https://support.apple.com/en-us/HT213346 - https://support.apple.com/en-us/HT213344 - https://
pple.com/en-us/HT213345 - https://support.apple.com/en-us/HT213346 - https://support.apple.com/en-us/HT213344 - https://support.apple.com/en-us/HT213343
CVE ID: CVE-2022-32786 State: PUBLISHED Published: 2022-09-23T18:59:01.000Z Last Updated: 2025-05-22T19:10:42.619Z Vendors: Apple Products: macOS Problem Types: An app may be able to modify protected parts of the file system Description: An issue in the handling of environment variables was addressed with improved validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to modify protected parts of the file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213345 - https://support.apple.com/en-us/HT213344 - https://support.apple.com/en-u
: - https://support.apple.com/en-us/HT213345 - https://support.apple.com/en-us/HT213344 - https://support.apple.com/en-us/HT213343
CVE ID: CVE-2022-32787 State: PUBLISHED Published: 2022-09-23T18:59:00.000Z Last Updated: 2025-05-22T19:14:28.785Z Vendors: Apple Products: macOS, tvOS, watchOS Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. Processing maliciously crafted web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT2
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213345 - https://support.apple.com/en-us/HT213340 - https://support.apple.com/en-us/HT213342 - https://support.apple.com/en-us/HT213346 - https://support.apple.com/en-us/HT213344 - https://support.apple.com/en-us/HT213343
CVE ID: CVE-2022-32788 State: PUBLISHED Published: 2022-09-20T20:19:07.000Z Last Updated: 2025-05-28T15:49:51.074Z Vendors: Apple Products: macOS, tvOS, watchOS Problem Types: A remote user may be able to cause kernel code execution Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. A remote user may be able to cause kernel code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213345 - https://support.apple.com/en-us/HT213340 - https://support.apple.com/en-us/HT213342 - https://support.appl
us/HT213345 - https://support.apple.com/en-us/HT213340 - https://support.apple.com/en-us/HT213342 - https://support.apple.com/en-us/HT213346