Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-42768 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T19:27:28.150Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8013 Problem Types: CWE-126 Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006
CVE ID: CVE-2022-42769 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T14:35:12.471Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8014 Problem Types: CWE-125 Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006
CVE ID: CVE-2022-42770 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T14:33:22.984Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8019 Problem Types: CWE-362 Description: In wlan driver, there is a race condition, This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006
CVE ID: CVE-2022-42771 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T19:25:57.242Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8020 Problem Types: CWE-362 Description: In wlan driver, there is a race condition, This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006
CVE ID: CVE-2022-42772 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T19:24:39.875Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8021 Problem Types: CWE-787 Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006
CVE ID: CVE-2022-42773 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T19:18:22.168Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8001 Problem Types: CWE-125 Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006
CVE ID: CVE-2022-42774 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T19:13:40.071Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8002 Problem Types: CWE-126 Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006
CVE ID: CVE-2022-42775 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T18:28:49.348Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-119 Description: In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006
CVE ID: CVE-2022-42776 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T18:27:04.457Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-862 Description: In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006
CVE ID: CVE-2022-42777 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T18:20:00.645Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-862 Description: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-42778 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T18:19:08.600Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-862 Description: In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006
CVE ID: CVE-2022-42779 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T18:16:33.311Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8003 Problem Types: CWE-126 Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006
CVE ID: CVE-2022-42780 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T18:15:55.843Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8005 Problem Types: CWE-126 Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006
CVE ID: CVE-2022-42781 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T18:13:21.387Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8006 Problem Types: CWE-126 Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006
CVE ID: CVE-2022-42782 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T18:11:55.245Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8007 Problem Types: CWE-200 Description: In wlan driver, there is a possible missing permission check, This could lead to local information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006
CVE ID: CVE-2022-42783 State: PUBLISHED Published: 2023-02-06T05:27:38.699Z Last Updated: 2025-03-26T14:23:26.844Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-42784 State: PUBLISHED Published: 2023-12-12T10:02:37.510Z Last Updated: 2024-10-08T08:39:57.161Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: LOGO! 12/24RCE, LOGO! 12/24RCEo, LOGO! 230RCE, LOGO! 230RCEo, LOGO! 24CE, LOGO! 24CEo, LOGO! 24RCE, LOGO! 24RCEo, SIPLUS LOGO! 12/24RCE, SIPLUS LOGO! 12/24RCEo, SIPLUS LOGO! 230RCE, SIPLUS LOGO! 230RCEo, SIPLUS LOGO! 24CE, SIPLUS LOGO! 24CEo, SIPLUS LOGO! 24RCE, SIPLUS LOGO! 24RCEo Problem Types: CWE-1319 Description: A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >=
ed in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions >= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions >= V8.3), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions >= V8.3), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions >= V8.3), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions >= V8.3), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCEo (6AG105
1) (All versions >= V8.3), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions >= V8.3). Affected devices are vulnerable to an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the product C
ry. Further actions could allow to inject public keys of custom created key pairs which are then signed by the product CA. The generation of a custom certificate allows communication with, and impersonation of, any device of the same version. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-844582.pdf - https://cert-portal.siemens.com/productcert/html/ssa-844582.html
CVE ID: CVE-2022-42785 State: PUBLISHED Published: 2022-11-10T11:01:41.011Z Last Updated: 2025-05-01T19:02:00.365Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Wiesemann & Theis Products: Com-Server LC, Com-Server PoE 3 x Isolated, Com-Server 20mA, Com-Server ++, AT-Modem-Emulator, Com-Server UL, Com-Server Highspeed 100BaseFX, Com-Server Highspeed 100BaseLX, Com-Server Highspeed Office 1 Port, Com-Server Highspeed Office 4 Port, Com-Server Highspeed Industry, Com-Server Highspeed OEM, Com-Server Highspeed Compact, Com-Server Highspeed Isolated, Com-Server Highspeed 19" 1Port, Com-Server Highspeed 19" 4Port, Com-Server Highspeed PoE Problem Types: CWE-3
Isolated, Com-Server Highspeed 19" 1Port, Com-Server Highspeed 19" 4Port, Com-Server Highspeed PoE Problem Types: CWE-306 Description: Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET Request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/de/advisories/VDE-2022-043/
CVE ID: CVE-2022-42786 State: PUBLISHED Published: 2022-11-10T11:02:32.615Z Last Updated: 2025-04-29T14:56:50.373Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Wiesemann & Theis Products: Com-Server LC, Com-Server PoE 3 x Isolated, Com-Server 20mA, Com-Server ++, AT-Modem-Emulator, Com-Server UL, Com-Server Highspeed 100BaseFX, Com-Server Highspeed 100BaseLX, Com-Server Highspeed Office 1 Port, Com-Server Highspeed Office 4 Port, Com-Server Highspeed Industry, Com-Server Highspeed OEM, Com-Server Highspeed Compact, Com-Server Highspeed Isolated, Com-Server Highspeed 19" 1Port, Com-Server Highspeed 19" 4Port, Com-Server Highspeed PoE Problem Types: CWE-79
solated, Com-Server Highspeed 19" 1Port, Com-Server Highspeed 19" 4Port, Com-Server Highspeed PoE Problem Types: CWE-79 Description: Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/de/advisories/VDE-2022-043/
CVE ID: CVE-2022-42787 State: PUBLISHED Published: 2022-11-10T11:06:20.856Z Last Updated: 2025-05-01T19:01:20.740Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Wiesemann & Theis Products: Com-Server LC, Com-Server PoE 3 x Isolated, Com-Server 20mA, Com-Server ++, AT-Modem-Emulator, Com-Server UL, Com-Server Highspeed 100BaseFX, Com-Server Highspeed 100BaseLX, Com-Server Highspeed Office 1 Port, Com-Server Highspeed Office 4 Port, Com-Server Highspeed Industry, Com-Server Highspeed OEM, Com-Server Highspeed Compact, Com-Server Highspeed Isolated, Com-Server Highspeed 19" 1Port, Com-Server Highspeed 19" 4Port, Com-Server Highspeed PoE Problem Types: CWE-330 D
lated, Com-Server Highspeed 19" 1Port, Com-Server Highspeed 19" 4Port, Com-Server Highspeed PoE Problem Types: CWE-330 Description: Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and get access to his account on the the device. As the user needs to log in for the attack to be successful a user interaction is required. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/de/advisories/VDE-2022-043
CVE ID: CVE-2022-42788 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T19:07:30.470Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to read sensitive location information Description: A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Ventura 13. A malicious application may be able to read sensitive location information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488
CVE ID: CVE-2022-42789 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T13:19:04.460Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may be able to access user-sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213443 - https://support.apple.com/en-us/HT213444 - https://support.apple.com/en-us/HT213488
CVE ID: CVE-2022-42790 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T13:19:03.862Z Vendors: Apple Products: macOS Problem Types: A user may be able to view restricted content from the lock screen Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. A user may be able to view restricted content from the lock screen. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213446 - https://support.apple.com/en-us/HT213443 - https://support.apple.com/en-us/HT213445 - https://support.apple.com/
13446 - https://support.apple.com/en-us/HT213443 - https://support.apple.com/en-us/HT213445 - https://support.apple.com/en-us/HT213444 - https://support.apple.com/en-us/HT213488
CVE ID: CVE-2022-42791 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T16:37:28.008Z Vendors: Apple Products: macOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/kb/HT213446 - https://support.apple.com/en-us/HT213488
CVE ID: CVE-2022-42792 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-06T18:42:27.451Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may be able to read sensitive location information Description: This issue was addressed with improved data protection. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to read sensitive location information Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213489
CVE ID: CVE-2022-42793 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-22T15:41:49.668Z Vendors: Apple Products: macOS Problem Types: An app may be able to bypass code signing checks Description: An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. An app may be able to bypass code signing checks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213446 - https://support.apple.com/en-us/HT213443 - https://support.apple.com/en-us/HT213445 - https://support.ap
n-us/HT213446 - https://support.apple.com/en-us/HT213443 - https://support.apple.com/en-us/HT213445 - https://support.apple.com/en-us/HT213444 - https://support.apple.com/en-us/HT213488
CVE ID: CVE-2022-42794 State: REJECTED Published: N/A Last Updated: 2023-05-08T00:00:00 Description: No description available.
CVE ID: CVE-2022-42795 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-22T15:37:26.529Z Vendors: Apple Products: macOS, watchOS Problem Types: Processing a maliciously crafted image may lead to arbitrary code execution Description: A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS Ventura 13, watchOS 9. Processing a maliciously crafted image may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213446 - https://support.apple.com/en-us/HT213488 - https://support.apple.com/en-us/HT213486 - http
rt.apple.com/en-us/HT213446 - https://support.apple.com/en-us/HT213488 - https://support.apple.com/en-us/HT213486 - https://support.apple.com/en-us/HT213487
CVE ID: CVE-2022-42796 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-04-22T15:35:05.136Z Vendors: Apple Products: macOS Problem Types: An app may be able to gain elevated privileges Description: This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.7 and iPadOS 15.7, macOS Ventura 13. An app may be able to gain elevated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213445 - https://support.apple.com/en-us/HT213488
CVE ID: CVE-2022-42797 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T14:44:34.947Z Vendors: Apple Products: Xcode Problem Types: An app may be able to gain root privileges Description: An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213496
CVE ID: CVE-2022-42798 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T16:36:29.599Z Vendors: Apple Products: macOS, tvOS, watchOS Problem Types: Parsing a maliciously crafted audio file may lead to disclosure of user information Description: The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. Parsing a maliciously crafted audio file may lead to disclosure of user information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/H
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488 - https://support.apple.com/en-us/HT213493 - https://support.apple.com/en-us/HT213494 - https://support.apple.com/en-us/HT213489 - https://support.apple.com/en-us/HT213492 - https://support.apple.com/en-us/HT213491 - https://support.apple.com/en-us/HT213490
CVE ID: CVE-2022-42799 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T16:34:16.366Z Vendors: Apple Products: macOS, tvOS, watchOS Problem Types: Visiting a malicious website may lead to user interface spoofing Description: The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiting a malicious website may lead to user interface spoofing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213488 - https://support.apple.com/en-us/HT213489 - https://support.apple.com/en-us/HT213492 - https://
pple.com/en-us/HT213488 - https://support.apple.com/en-us/HT213489 - https://support.apple.com/en-us/HT213492 - https://support.apple.com/en-us/HT213495 - https://support.apple.com/en-us/HT213491 - http://www.openwall.com/lists/oss-security/2022/11/04/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/ - https://www.debian.org/security/2022/dsa-5273 - https://www.debian.org/security/2022/dsa-5274 - https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/ - https://lists