Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-22563 State: PUBLISHED Published: 2022-04-08T19:50:27.503928Z Last Updated: 2024-09-16T20:57:30.739Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-223 Description: Dell EMC Powerscale OneFS 8.2.x - 9.2.x omit security-relevant information in /etc/master.passwd. A high-privileged user can exploit this vulnerability to not record information identifying the source of account information changes. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000196657
CVE ID: CVE-2022-22564 State: PUBLISHED Published: 2023-02-14T15:34:09.480Z Last Updated: 2025-03-20T14:07:01.410Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Unity Problem Types: CWE-327 Description: Dell EMC Unity versions before 5.2.0.0.5.173 , use(es) broken cryptographic algorithm. A remote unauthenticated attacker could potentially exploit this vulnerability by performing MitM attacks and let attackers obtain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000199050/dsa-2022-021-dell-unity-dell-unityvsa-and-dell-unity-xt-security
s: - https://www.dell.com/support/kbdoc/en-us/000199050/dsa-2022-021-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2022-22565 State: PUBLISHED Published: 2022-04-12T17:50:48.589659Z Last Updated: 2024-09-16T19:25:47.667Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-612 Description: Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information. An authenticated and privileged user could potentially exploit this vulnerability, leading to disclosure or modification of sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000195815
CVE ID: CVE-2022-22566 State: PUBLISHED Published: 2022-02-09T20:00:15.542877Z Last Updated: 2024-09-17T01:45:36.114Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-1190 Description: Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028
CVE ID: CVE-2022-22567 State: PUBLISHED Published: 2022-02-09T20:00:16.918449Z Last Updated: 2024-09-16T20:51:53.564Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L) Vendors: Dell Products: CPG BIOS Problem Types: CWE-345 Description: Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028
CVE ID: CVE-2022-22570 State: PUBLISHED Published: 2022-04-01T22:17:03 Last Updated: 2024-08-03T03:14:55.789Z Vendors: n/a Products: UniFi Door Access Reader Lite Problem Types: CWE-120 Description: A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s (UA Lite) firmware (Version 3.8.28.24 and earlier) allows a malicious actor who has gained access to a network to control all connected UA devices. This vulnerability is fixed in Version 3.8.31.13 and later. Additional Analyst Notes: - CVE Program Container: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-024-024/22725557-0f72-4f5d-83b0-f16252fcd4b7
CVE ID: CVE-2022-22571 State: PUBLISHED Published: 2022-04-11T19:38:12 Last Updated: 2024-08-03T03:14:55.701Z Vendors: n/a Products: Ivanti Incapptic Connect Problem Types: CWE-79 Description: An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic connect and affects all current versions. Additional Analyst Notes: - CVE Program Container: References: - https://forums.ivanti.com/s/article/Security-Advisory-for-incapptic-Connect-SA-2022-03-11?language=en_US - https://excellium-services.com/cert-xlm-advisory/cve-2022-22571/
CVE ID: CVE-2022-22572 State: PUBLISHED Published: 2022-04-11T19:38:13 Last Updated: 2024-08-03T03:14:55.850Z Vendors: n/a Products: Ivanti Incapptic Connect Problem Types: Privilege Escalation (CAPEC-233) Description: A non-admin user with user management permission can escalate his privilege to admin user via password reset functionality. The vulnerability affects Incapptic Connect version < 1.40.1. Additional Analyst Notes: - CVE Program Container: References: - https://excellium-services.com/cert-xlm-advisory/cve-2022-22572/ - https://forums.ivanti.com/s/article/Security-Advisory-for-incapptic-Connect-SA-2022-03-10?language=en_US
CVE ID: CVE-2022-22576 State: PUBLISHED Published: 2022-05-26T00:00:00 Last Updated: 2024-08-03T03:14:55.806Z Vendors: n/a Products: https://github.com/curl/curl Problem Types: CWE-287 Description: An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only). Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1526328 - https://security.netapp.com/advisory/ntap
- CVE Program Container: References: - https://hackerone.com/reports/1526328 - https://security.netapp.com/advisory/ntap-20220609-0008/ - https://www.debian.org/security/2022/dsa-5197 - https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html - https://security.gentoo.org/glsa/202212-01
CVE ID: CVE-2022-22577 State: PUBLISHED Published: 2022-05-26T00:00:00 Last Updated: 2024-08-03T03:14:55.738Z Vendors: n/a Products: https://github.com/rails/rails Problem Types: CWE-79 Description: An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.rubyonrails.org/t/cve-2022-22577-possible-xss-vulnerability-in-action-pack/80533 - https://lists.debian.org/debian-lts-announce/2022/09/msg00002.html - https://security.netapp.com/advisory/ntap-20221118-0002/ - https://www.debian.org/security/2023/dsa-5372
CVE ID: CVE-2022-22578 State: PUBLISHED Published: 2022-03-18T17:59:12 Last Updated: 2024-08-03T03:14:55.740Z Vendors: Apple Products: iOS and iPadOS, macOS, tvOS, watchOS Problem Types: A malicious application may be able to gain root privileges Description: A logic issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2. A malicious application may be able to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213053 - https://support.apple.com/en-us/HT213054 - https://support.apple.com/en-us/HT213057 - https://support.apple.com/en-us/HT213
ps://support.apple.com/en-us/HT213054 - https://support.apple.com/en-us/HT213057 - https://support.apple.com/en-us/HT213059
CVE ID: CVE-2022-22579 State: PUBLISHED Published: 2022-03-18T17:59:12 Last Updated: 2024-08-03T03:14:55.780Z Vendors: Apple Products: iOS and iPadOS, macOS, tvOS Problem Types: Processing a maliciously crafted STL file may lead to unexpected application termination or arbitrary code execution Description: An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, tvOS 15.3, Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. Processing a maliciously crafted STL file may lead to unexpected application termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: Referen
expected application termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213055 - https://support.apple.com/en-us/HT213053 - https://support.apple.com/en-us/HT213054 - https://support.apple.com/en-us/HT213056 - https://support.apple.com/en-us/HT213057
CVE ID: CVE-2022-22582 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T17:12:07.364Z Vendors: Apple Products: macOS Problem Types: A local user may be able to write arbitrary files Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5, macOS Monterey 12.3. A local user may be able to write arbitrary files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213183 - https://support.apple.com/en-us/HT213184 - https://support.apple.com/en-
s: - https://support.apple.com/en-us/HT213183 - https://support.apple.com/en-us/HT213184 - https://support.apple.com/en-us/HT213185
CVE ID: CVE-2022-22583 State: PUBLISHED Published: 2022-03-18T17:59:13 Last Updated: 2024-08-03T03:14:55.751Z Vendors: Apple Products: macOS Problem Types: An application may be able to access restricted files Description: A permissions issue was addressed with improved validation. This issue is fixed in Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access restricted files. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213055 - https://support.apple.com/en-us/HT213054 - https://support.apple.com/en-us/HT213056
CVE ID: CVE-2022-22584 State: PUBLISHED Published: 2022-03-18T17:59:16 Last Updated: 2024-08-03T03:14:55.754Z Vendors: Apple Products: iOS and iPadOS, macOS, tvOS, watchOS Problem Types: Processing a maliciously crafted file may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2. Processing a maliciously crafted file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213053 - https://support.apple.com/en-us/HT213054 - https://support.apple.com/en-us/HT2130
s://support.apple.com/en-us/HT213053 - https://support.apple.com/en-us/HT213054 - https://support.apple.com/en-us/HT213057 - https://support.apple.com/en-us/HT213059
CVE ID: CVE-2022-22585 State: PUBLISHED Published: 2022-03-18T17:59:14 Last Updated: 2024-08-03T03:14:55.779Z Vendors: Apple Products: iOS and iPadOS, macOS, tvOS, watchOS Problem Types: An application may be able to access a user's files Description: An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access a user's files. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213055 - https://support.apple.com/en-us/HT213053 - https:
am Container: References: - https://support.apple.com/en-us/HT213055 - https://support.apple.com/en-us/HT213053 - https://support.apple.com/en-us/HT213054 - https://support.apple.com/en-us/HT213057 - https://support.apple.com/en-us/HT213059
CVE ID: CVE-2022-22586 State: PUBLISHED Published: 2022-03-18T17:59:16 Last Updated: 2024-08-03T03:14:55.745Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213054
CVE ID: CVE-2022-22587 State: PUBLISHED Published: 2022-03-18T17:59:15.000Z Last Updated: 2025-10-21T23:15:43.900Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited. Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.. Additional Analyst
ith kernel privileges. Apple is aware of a report that this issue may have been actively exploited.. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213055 - https://support.apple.com/en-us/HT213053 - https://support.apple.com/en-us/HT213054
CVE ID: CVE-2022-22588 State: PUBLISHED Published: 2022-03-18T17:59:17 Last Updated: 2024-08-03T03:14:55.845Z Vendors: Apple Products: iOS and iPadOS Problem Types: Processing a maliciously crafted HomeKit accessory name may cause a denial of service Description: A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 15.2.1 and iPadOS 15.2.1. Processing a maliciously crafted HomeKit accessory name may cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213043
CVE ID: CVE-2022-22589 State: PUBLISHED Published: 2022-03-18T17:59:18 Last Updated: 2024-08-03T03:14:55.748Z Vendors: Apple Products: iOS and iPadOS, macOS, tvOS, watchOS Problem Types: Processing a maliciously crafted mail message may lead to running arbitrary javascript Description: A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT213185 - https://support.apple.com/en-us/HT213053 - htt
Program Container: References: - https://support.apple.com/kb/HT213185 - https://support.apple.com/en-us/HT213053 - https://support.apple.com/en-us/HT213054 - https://support.apple.com/en-us/HT213057 - https://support.apple.com/en-us/HT213059 - https://support.apple.com/en-us/HT213058 - https://support.apple.com/kb/HT213256 - https://support.apple.com/kb/HT213255 - http://seclists.org/fulldisclosure/2022/May/33 - http://seclists.org/fulldisclosure/2022/May/35 - https://security.gentoo.org/glsa/202208-39
CVE ID: CVE-2022-22590 State: PUBLISHED Published: 2022-03-18T17:59:20 Last Updated: 2024-08-03T03:14:55.778Z Vendors: Apple Products: iOS and iPadOS, macOS, tvOS, watchOS Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213053 - https://support.apple.com/en-us/HT213054 - https://sup
ntainer: References: - https://support.apple.com/en-us/HT213053 - https://support.apple.com/en-us/HT213054 - https://support.apple.com/en-us/HT213057 - https://support.apple.com/en-us/HT213059 - https://support.apple.com/en-us/HT213058 - https://security.gentoo.org/glsa/202208-39
CVE ID: CVE-2022-22591 State: PUBLISHED Published: 2022-03-18T17:59:19 Last Updated: 2024-08-03T03:14:55.767Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213054
CVE ID: CVE-2022-22592 State: PUBLISHED Published: 2022-03-18T17:59:24 Last Updated: 2024-08-03T03:14:55.777Z Vendors: Apple Products: iOS and iPadOS, macOS, tvOS, watchOS Problem Types: Processing maliciously crafted web content may prevent Content Security Policy from being enforced Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may prevent Content Security Policy from being enforced. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213053 - https://support.apple.com/
lyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213053 - https://support.apple.com/en-us/HT213054 - https://support.apple.com/en-us/HT213057 - https://support.apple.com/en-us/HT213059 - https://support.apple.com/en-us/HT213058 - https://security.gentoo.org/glsa/202208-39
CVE ID: CVE-2022-22593 State: PUBLISHED Published: 2022-03-18T17:59:21 Last Updated: 2024-08-03T03:14:55.756Z Vendors: Apple Products: iOS and iPadOS, macOS, tvOS, watchOS Problem Types: A malicious application may be able to execute arbitrary code with kernel privileges Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. A malicious application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213055 - h
rivileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213055 - https://support.apple.com/en-us/HT213053 - https://support.apple.com/en-us/HT213054 - https://support.apple.com/en-us/HT213056 - https://support.apple.com/en-us/HT213057 - https://support.apple.com/en-us/HT213059
CVE ID: CVE-2022-22594 State: PUBLISHED Published: 2022-03-18T17:59:23 Last Updated: 2024-08-03T03:14:55.681Z Vendors: Apple Products: iOS and iPadOS, macOS, tvOS, watchOS Problem Types: A website may be able to track sensitive user information Description: A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213053 - https://support.apple.com/en-us/HT213054 - https://support.apple.com/en-us/HT21305
://support.apple.com/en-us/HT213053 - https://support.apple.com/en-us/HT213054 - https://support.apple.com/en-us/HT213057 - https://support.apple.com/en-us/HT213059 - https://support.apple.com/en-us/HT213058
CVE ID: CVE-2022-22596 State: PUBLISHED Published: 2022-03-18T17:59:21 Last Updated: 2024-08-03T03:14:55.766Z Vendors: Apple Products: iOS and iPadOS, watchOS Problem Types: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213182 - https://support.apple.com/en-us/HT213193
CVE ID: CVE-2022-22597 State: PUBLISHED Published: 2022-03-18T17:59:25 Last Updated: 2024-08-03T03:14:55.845Z Vendors: Apple Products: macOS Problem Types: Processing a maliciously crafted file may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213183 - https://support.apple.com/en-us/HT213184 - https://support.apple.com/en-us/HT213185
CVE ID: CVE-2022-22598 State: PUBLISHED Published: 2022-03-18T17:59:22 Last Updated: 2024-08-03T03:14:55.849Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may be able to learn information about the current camera view before being granted camera access Description: An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 15.4 and iPadOS 15.4. An app may be able to learn information about the current camera view before being granted camera access. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213182
CVE ID: CVE-2022-22599 State: PUBLISHED Published: 2022-03-18T17:59:26 Last Updated: 2024-08-03T03:14:55.762Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS Problem Types: A person with physical access to a device may be able to use Siri to obtain some location information from the lock screen Description: Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. A person with physical access to a device may be able to use Siri to obtain some location information from the lock screen. Additional Analyst Notes: - CVE Program Container: References: - https://support.
tion information from the lock screen. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213182 - https://support.apple.com/en-us/HT213193 - https://support.apple.com/en-us/HT213183 - https://support.apple.com/en-us/HT213184
CVE ID: CVE-2022-22600 State: PUBLISHED Published: 2022-03-18T17:59:26 Last Updated: 2024-08-03T03:14:55.842Z Vendors: Apple Products: iOS and iPadOS, macOS, tvOS, watchOS Problem Types: A malicious application may be able to bypass certain Privacy preferences Description: The issue was addressed with improved permissions logic. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. A malicious application may be able to bypass certain Privacy preferences. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213182 - https://support.apple.com/en-us/HT213193 - https://support.apple.com/en-us/HT213183 - https:
.apple.com/en-us/HT213182 - https://support.apple.com/en-us/HT213193 - https://support.apple.com/en-us/HT213183 - https://support.apple.com/en-us/HT213186
CVE ID: CVE-2022-22601 State: PUBLISHED Published: 2022-03-18T17:59:29 Last Updated: 2024-08-03T03:14:55.753Z Vendors: Apple Products: Xcode Problem Types: Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213189