Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-46650 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T16:15:42.259Z Vendors: n/a Products: ALEOS Problem Types: CWE-200 Description: Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACEManager credentials on the pre-login status page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-001/ - https://www.otorio.com/blog/airlink-acemanager-vulnerabilities/ - https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-04
CVE ID: CVE-2022-46651 State: PUBLISHED Published: 2023-07-12T09:17:06.966Z Last Updated: 2024-10-04T13:45:35.520Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-200 Description: Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considered low since it requires someone with access to Connection resources specifically updating the connection to exploit it. Users should upgrade to version 2.6.3 or later which has removed the vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
hich has removed the vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/airflow/pull/32309 - https://lists.apache.org/thread/n45h3y82og125rnlgt6rbm9szfb6q24d
CVE ID: CVE-2022-46655 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:21:40.920Z Description: No description available.
CVE ID: CVE-2022-46656 State: PUBLISHED Published: 2023-05-10T13:16:57.433Z Last Updated: 2025-01-27T18:05:39.744Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC Pro Software Suite Problem Types: escalation of privilege, CWE-277 Description: Insecure inherited permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00834.html
CVE ID: CVE-2022-46658 State: PUBLISHED Published: 2023-05-22T22:46:13.216Z Last Updated: 2025-01-16T21:32:18.146Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Dataprobe, Inc. Products: Dataprobe iBoot-PDU FW Problem Types: CWE-121 Stack-based Buffer Overflow Description: The affected product is vulnerable to a stack-based buffer overflow which could lead to a denial of service or remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-22-263-03 - https://dataprobe.com/support/iboot-pdu/local_upgrade_pdu_procedure.pdf
CVE ID: CVE-2022-46660 State: PUBLISHED Published: 2023-01-17T23:47:18.275Z Last Updated: 2025-01-16T22:01:06.427Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: GE Digital Products: Proficy Historian Problem Types: CWE-434 Description: An unauthorized user could alter or write files with full control over the path and content of the file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-017-01 - https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01
CVE ID: CVE-2022-46662 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-16T15:53:49.466Z Vendors: Corel Corporation Products: Roxio Creator LJB Problem Types: Unquoted Search Path or Element Description: Roxio Creator LJB starts another program with an unquoted file path. Since a registered Windows service path contains spaces and are unquoted, if a malicious executable is placed on a certain path, the executable may be executed with the privilege of the Windows service. The affected product and versions are as follows: Roxio Creator LJB version number 12.2 build number 106B62B, version number 12.2 build number 106B63A, version number 12.2 build number 106B69A, vers
mber 12.2 build number 106B62B, version number 12.2 build number 106B63A, version number 12.2 build number 106B69A, version number 12.2 build number 106B71A, and version number 12.2 build number 106B74A) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.corel.com/jp/129393 - https://jvn.jp/en/jp/JVN13075438/index.html
CVE ID: CVE-2022-46663 State: PUBLISHED Published: 2023-02-07T00:00:00.000Z Last Updated: 2025-03-25T14:40:07.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gwsw/less/commit/a78e1351113cef564d790a730d657a321624d79c - http://www.greenwoodsoftware.com/less/news.609.html - https://www.openwall.com/lists/oss-security/2023/02/07/7 - http://www.openwall.com/lists/oss-security/2023/02/07/7 - https://lists.fedoraproject.org/archives/list/package-announce%40li
//www.openwall.com/lists/oss-security/2023/02/07/7 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LR7AUWB34JD4PCW3HHASBEDGGHFWPAQP/ - https://security.gentoo.org/glsa/202310-11
CVE ID: CVE-2022-46664 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-21T13:42:18.164Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: Mendix Workflow Commons, Mendix Workflow Commons V2.1, Mendix Workflow Commons V2.3 Problem Types: CWE-284 Description: A vulnerability has been identified in Mendix Workflow Commons (All versions < V2.4.0), Mendix Workflow Commons V2.1 (All versions < V2.1.4), Mendix Workflow Commons V2.3 (All versions < V2.3.2). Affected versions of the module improperly handle access control for some module entities. This could allow authenticated remote attackers to read or delete
perly handle access control for some module entities. This could allow authenticated remote attackers to read or delete sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-210822.pdf
CVE ID: CVE-2022-46665 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-46666 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-46667 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-46668 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-46669 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-46670 State: PUBLISHED Published: 2022-12-16T20:12:22.414Z Last Updated: 2025-04-17T14:35:29.173Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Rockwell Automation Products: MicroLogix 1100 & 1400 Controllers, MicroLogix 1400-B/C, MicroLogix 1400-A Problem Types: CWE-79 Description: Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webser
code execution. The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137679
CVE ID: CVE-2022-46671 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-46672 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-46673 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-46675 State: PUBLISHED Published: 2023-02-10T21:09:21.184Z Last Updated: 2025-03-24T17:57:39.257Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-209 Description: Wyse Management Suite Repository 3.8 and below contain an information disclosure vulnerability. A unauthenticated attacker could potentially discover the internal structure of the application and its components and use this information for further vulnerability research. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell
m Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2022-46676 State: PUBLISHED Published: 2023-02-10T21:12:56.102Z Last Updated: 2025-03-24T17:56:31.172Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-284 Description: Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A malicious admin user can disable or delete users under administration and unassigned admins for which the group admin is not authorized. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-mult
s: - https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2022-46677 State: PUBLISHED Published: 2023-02-10T21:17:46.773Z Last Updated: 2025-03-24T17:55:25.168Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-284 Description: Wyse Management Suite 3.8 and below contain an improper access control vulnerability with which an custom group admin can create a subgroup under a group for which the admin is not authorized. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2022-46678 State: PUBLISHED Published: 2023-02-10T21:15:22.306Z Last Updated: 2025-03-24T17:55:56.545Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-284 Description: Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy for which the user is not authorized. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2022-46679 State: PUBLISHED Published: 2023-02-01T05:33:26.974Z Last Updated: 2025-03-26T18:53:18.852Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-410 Description: Dell PowerScale OneFS 8.2.x, 9.0.0.x - 9.4.0.x, contain an insufficient resource pool vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000206927/dsa-2022-323-dell-emc-powerscale-onefs-security-updates-for-multiple-security-vulne
ll.com/support/kbdoc/en-us/000206927/dsa-2022-323-dell-emc-powerscale-onefs-security-updates-for-multiple-security-vulnerabilities
CVE ID: CVE-2022-46680 State: PUBLISHED Published: 2023-05-22T13:25:40.615Z Last Updated: 2025-01-21T15:05:49.099Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: PowerLogic ION9000, PowerLogic ION7400, PowerLogic PM8000, PowerLogic ION8650, PowerLogic ION8800, Legacy ION products Problem Types: CWE-319 Description: A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
o intercept network traffic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-129-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-129-03.pdf
CVE ID: CVE-2022-46681 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2022-46682 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T16:04:52.176Z Vendors: Jenkins Project Products: Jenkins Plot Plugin Description: Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2940
CVE ID: CVE-2022-46683 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T15:46:12.412Z Vendors: Jenkins Project Products: Jenkins Google Login Plugin Description: Jenkins Google Login Plugin 1.4 through 1.6 (both inclusive) improperly determines that a redirect URL after login is legitimately pointing to Jenkins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2967
CVE ID: CVE-2022-46684 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T15:44:06.150Z Vendors: Jenkins Project Products: Jenkins Checkmarx Plugin Description: Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2869
CVE ID: CVE-2022-46685 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T14:13:22.512Z Vendors: Jenkins Project Products: Jenkins Gitea Plugin Description: In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2661
CVE ID: CVE-2022-46686 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T15:43:14.301Z Vendors: Jenkins Project Products: Jenkins Custom Build Properties Plugin Description: Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display names on the Custom Build Properties and Build Summary pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set or change these values. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2810
CVE ID: CVE-2022-46687 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T15:42:04.838Z Vendors: Jenkins Project Products: Jenkins Spring Config Plugin Description: Jenkins Spring Config Plugin 2.0.0 and earlier does not escape build display names shown on the Spring Config view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to change build display names. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2814
CVE ID: CVE-2022-46688 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T15:36:34.859Z Vendors: Jenkins Project Products: Jenkins Sonar Gerrit Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Sonar Gerrit Plugin 377.v8f3808963dc5 and earlier allows attackers to have Jenkins connect to Gerrit servers (previously configured by Jenkins administrators) using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-1002
CVE ID: CVE-2022-46689 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T15:21:15.921Z Vendors: Apple Products: macOS, tvOS, watchOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213535 - https://suppor
CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213535 - https://support.apple.com/en-us/HT213532 - https://support.apple.com/en-us/HT213530 - https://support.apple.com/en-us/HT213531 - https://support.apple.com/en-us/HT213536 - https://support.apple.com/en-us/HT213534 - https://support.apple.com/en-us/HT213533 - http://seclists.org/fulldisclosure/2022/Dec/20 - http://seclists.org/fulldisclosure/2022/Dec/21 - http://seclists.org/fulldisclosure/2022/Dec/25 - http://seclists.org/fulldisclosure/2022/Dec/23 - http://seclists.org/fulldisclosure/2022/Dec/26 - http://seclists.org/fulldisclosure/2022/Dec/24 - http://seclists.org/fulldisclosure/2022/De
fulldisclosure/2022/Dec/26 - http://seclists.org/fulldisclosure/2022/Dec/24 - http://seclists.org/fulldisclosure/2022/Dec/27
CVE ID: CVE-2022-46690 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T14:06:38.032Z Vendors: Apple Products: tvOS, watchOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213535 - https://support.apple.com/en-us/HT213532 - https://support.apple.com/en-us/HT213
ps://support.apple.com/en-us/HT213535 - https://support.apple.com/en-us/HT213532 - https://support.apple.com/en-us/HT213530 - https://support.apple.com/en-us/HT213536 - http://seclists.org/fulldisclosure/2022/Dec/20 - http://seclists.org/fulldisclosure/2022/Dec/23 - http://seclists.org/fulldisclosure/2022/Dec/26 - http://seclists.org/fulldisclosure/2022/Dec/27
CVE ID: CVE-2022-46691 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T14:29:07.611Z Vendors: Apple Products: tvOS, watchOS Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory consumption issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213535 - https://support.
VE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213535 - https://support.apple.com/en-us/HT213532 - https://support.apple.com/en-us/HT213530 - https://support.apple.com/en-us/HT213531 - https://support.apple.com/en-us/HT213536 - https://support.apple.com/en-us/HT213537 - http://seclists.org/fulldisclosure/2022/Dec/20 - http://seclists.org/fulldisclosure/2022/Dec/21 - http://seclists.org/fulldisclosure/2022/Dec/23 - http://seclists.org/fulldisclosure/2022/Dec/26 - http://seclists.org/fulldisclosure/2022/Dec/28 - http://seclists.org/fulldisclosure/2022/Dec/27 - https://security.gentoo.org/glsa/202305-32
CVE ID: CVE-2022-46692 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T14:27:34.750Z Vendors: Apple Products: iCloud for Windows, tvOS, watchOS Problem Types: Processing maliciously crafted web content may bypass Same Origin Policy Description: A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may bypass Same Origin Policy. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213535
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213535 - https://support.apple.com/en-us/HT213532 - https://support.apple.com/en-us/HT213538 - https://support.apple.com/en-us/HT213530 - https://support.apple.com/en-us/HT213531 - https://support.apple.com/en-us/HT213536 - https://support.apple.com/en-us/HT213537 - http://seclists.org/fulldisclosure/2022/Dec/20 - http://seclists.org/fulldisclosure/2022/Dec/21 - http://seclists.org/fulldisclosure/2022/Dec/23 - http://seclists.org/fulldisclosure/2022/Dec/26 - http://seclists.org/fulldisclosure/2022/Dec/28 - https://security.gentoo.org/glsa/202305-32
CVE ID: CVE-2022-46693 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T14:25:11.469Z Vendors: Apple Products: iCloud for Windows, tvOS, watchOS Problem Types: Processing a maliciously crafted file may lead to arbitrary code execution Description: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing a maliciously crafted file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213535 - https://support.apple
ogram Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213535 - https://support.apple.com/en-us/HT213532 - https://support.apple.com/en-us/HT213538 - https://support.apple.com/en-us/HT213530 - https://support.apple.com/en-us/HT213536 - http://seclists.org/fulldisclosure/2022/Dec/20 - http://seclists.org/fulldisclosure/2022/Dec/23 - http://seclists.org/fulldisclosure/2022/Dec/26 - http://seclists.org/fulldisclosure/2022/Dec/27